Lucene search
+L
UbuntuMost viewed

11060 matches found

Ubuntu
Ubuntu
•added 2016/10/11 4:37 a.m.•88 views

USN-3097-1: Linux kernel vulnerabilities

Marco Grassi discovered a use-after-free condition could occur in the TCP retransmit queue handling code in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2016-6828 Pengfei Wang discovered a race condition in the...

5.5CVSS6.5AI score0.01181EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2016/08/30 4:47 p.m.•88 views

USN-3070-4: Linux kernel (Xenial HWE) vulnerabilities

USN-3070-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. A missing permission check when settings ACLs was discovered in nfsd. A local user cou...

7.8CVSS7.5AI score0.15073EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2016/04/07 10:0 p.m.•88 views

USN-2917-2: Firefox regressions

USN-2917-1 fixed vulnerabilities in Firefox. This update caused several regressions that could result in search engine settings being lost, the list of search providers appearing empty or the location bar breaking after typing an invalid URL. This update fixes the problem. We apologize for the...

8.2AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2016/03/14 5:20 p.m.•88 views

USN-2932-1: Linux kernel (Vivid HWE) vulnerabilities

Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...

8.4CVSS7.2AI score0.03723EPSS
SaveExploits23
Ubuntu
Ubuntu
•added 2015/11/10 4:1 a.m.•88 views

USN-2806-1: Linux kernel (Vivid HWE) vulnerability

Ben Serebrin discovered that the KVM hypervisor implementation in the Linux kernel did not properly catch Alignment Check exceptions. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS...

4.9CVSS6.9AI score0.00566EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2015/09/03 4:38 p.m.•88 views

USN-2730-1: OpenSLP vulnerabilities

Georgi Geshev discovered that OpenSLP incorrectly handled processing certain service requests. A remote attacker could possibly use this issue to cause OpenSLP to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2012-4428 Qinghao Tang...

7.5CVSS7.2AI score0.09573EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/05/05 10:1 p.m.•88 views

USN-2597-1: Linux kernel (Trusty HWE) vulnerability

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges...

6.2CVSS6.8AI score0.00317EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2015/03/24 9:28 a.m.•88 views

USN-2546-1: Linux kernel vulnerabilities

A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privileges. CVE-2013-7421 A flaw was...

10CVSS6.6AI score0.09828EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2014/07/22 9:8 p.m.•88 views

USN-2296-1: Thunderbird vulnerabilities

Christian Holler, David Keeler and Byron Campen discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or...

10CVSS8.3AI score0.06109EPSS
SaveExploits0References1
Ubuntu
Ubuntu
•added 2014/07/16 11:39 p.m.•88 views

USN-2284-1: Linux kernel (OMAP4) vulnerabilities

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x86...

6.9CVSS6.7AI score0.02324EPSS
SaveExploits14
Ubuntu
Ubuntu
•added 2014/04/26 1:51 p.m.•88 views

USN-2179-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine KVM subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. CVE-2014-0049 Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged loc...

7.4CVSS7.2AI score0.00775EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2014/03/07 11:56 a.m.•88 views

USN-2138-1: Linux kernel vulnerabilities

Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing atack. CVE-2013-4579 Andrew Honig reported a flaw in the Linux Kernel's kvmvmioctlcreatevcpu function ...

7.2CVSS7AI score0.10209EPSS
SaveExploits8
Ubuntu
Ubuntu
•added 2014/02/18 10:36 p.m.•88 views

USN-2113-1: Linux kernel (Saucy HWE) vulnerabilities

Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload UFI in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service panic. CVE-2013-4563 Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker...

7.2CVSS6.8AI score0.10209EPSS
SaveExploits13
Ubuntu
Ubuntu
•added 2014/01/03 10:39 a.m.•88 views

USN-2066-1: Linux kernel vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged...

6.9CVSS7.1AI score0.0381EPSS
SaveExploits9
Ubuntu
Ubuntu
•added 2013/03/22 11:36 p.m.•88 views

USN-1778-1: Linux kernel (OMAP4) vulnerabilities

Andrew Jones discovered a flaw with the xeniret function in Linux kernel's Xen virtualizeation. In the 32-bit Xen paravirt platform an unprivileged guest OS user could exploit this flaw to cause a denial of service crash the system or gain guest OS privilege. CVE-2013-0228 A flaw was reported in...

6.5CVSS6.8AI score0.01557EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2013/01/18 3:48 a.m.•88 views

USN-1698-1: Linux kernel (OMAP4) vulnerabilities

A flaw was discovered in the Linux kernel's handling of script execution when module loading is enabled. A local attacker could exploit this flaw to cause a leak of kernel stack contents. CVE-2012-4530 Florian Weimer discovered that hypervkvpd, which is distributed in the Linux kernel, was not...

4.9CVSS5.7AI score0.00882EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2012/06/12 9:12 p.m.•88 views

USN-1470-1: Linux kernel (Natty backport) vulnerabilities

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation. A remote NFS server attacker could exploit this flaw to cause a denial of service. CVE-2011-4131 A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit...

7.2CVSS6.7AI score0.00775EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2012/05/31 9:38 p.m.•88 views

USN-1457-1: Linux kernel vulnerabilities

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation. A remote NFS server attacker could exploit this flaw to cause a denial of service. CVE-2011-4131 A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit...

7.2CVSS6.7AI score0.00775EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2012/03/06 6:38 p.m.•88 views

USN-1388-1: Linux kernel (EC2) vulnerabilities

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in KVM's Programmable Interval Timer PIT...

7.1CVSS6.8AI score0.02678EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2011/10/25 1:6 p.m.•88 views

USN-1244-1: Linux kernel (OMAP4) vulnerabilities

Dan Rosenberg discovered that the Linux kernel X.25 implementation incorrectly parsed facilities. A remote attacker could exploit this to crash the kernel, leading to a denial of service. CVE-2010-3873 Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being...

7.2CVSS6.9AI score0.03739EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2011/10/19 8:18 p.m.•88 views

USN-1232-2: X.Org X server regression

USN-1232-1 fixed vulnerabilities in the X.Org X server. A regression was found on Ubuntu 10.04 LTS that affected GLX support. This update temporarily disables the fix for CVE-2010-4818 that introduced the regression. We apologize for the inconvenience. Original advisory details: It was discovered...

5.8AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2011/09/14 7:37 p.m.•88 views

USN-1208-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

7.8CVSS6.8AI score0.08793EPSS
SaveExploits24
Ubuntu
Ubuntu
•added 2010/06/29 9:22 p.m.•88 views

USN-930-2: apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update

USN-930-1 fixed vulnerabilities in Firefox and Xulrunner. This update provides updated packages for use with Firefox 3.6 and Xulrunner 1.9.2 on Ubuntu 8.04 LTS. Original advisory details: If was discovered that Firefox could be made to access freed memory. If a user were tricked into viewing a...

9.1AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2009/08/19 2:55 p.m.•88 views

USN-802-2: Apache regression

USN-802-1 fixed vulnerabilities in Apache. The upstream fix for CVE-2009-1891 introduced a regression that would cause Apache children to occasionally segfault when moddeflate is used. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered...

7.7AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2008/05/20 1:0 p.m.•88 views

USN-612-7: OpenSSH update

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems tha...

7.8CVSS6.7AI score0.70721EPSS
SaveExploits11
Ubuntu
Ubuntu
•added 2008/03/19 11:31 p.m.•88 views

USN-588-1: MySQL vulnerabilities

Masaaki Hirose discovered that MySQL could be made to dereference a NULL pointer. An authenticated user could cause a denial of service application crash via an EXPLAIN SELECT FROM on the INFORMATIONSCHEMA table. This issue only affects Ubuntu 6.06 and 6.10. CVE-2006-7232 Alexander Nozdrin...

7.5CVSS8.3AI score0.91602EPSS
SaveExploits16
Ubuntu
Ubuntu
•added 2008/01/19 2:54 a.m.•88 views

USN-571-2: X.org regression

USN-571-1 fixed vulnerabilities in X.org. The upstream fixes were incomplete, and under certain situations, applications using the MIT-SHM extension e.g. Java, wxWidgets would crash with BadAlloc X errors. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...

8.4AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2006/10/10 11:15 p.m.•88 views

USN-361-1: Mozilla vulnerabilities

Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious URL. CVE-2006-2788, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3809, CVE-2006-3811, CVE-2006-4565, CVE-2006-4568, CVE-2006-4571 A bug was...

10CVSS7.9AI score0.0747EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2006/07/28 9:7 a.m.•88 views

USN-328-1: Apache vulnerability

Mark Dowd discovered an off-by-one buffer overflow in the modrewrite module's ldap scheme handling. On systems which activate "RewriteEngine on", a remote attacker could exploit certain rewrite rules to crash Apache, or potentially even execute arbitrary code this has not been verified...

7.6CVSS8AI score0.96436EPSS
SaveExploits21
Ubuntu
Ubuntu
•added 2025/04/10 8:38 p.m.•87 views

USN-7432-1: libsoup vulnerabilities

It was discovered that libsoup could be made to read out of bounds. An attacker could possibly use this issue to cause applications using libsoup to crash, resulting in a denial of service. CVE-2025-2784, CVE-2025-32050, CVE-2025-32052, CVE-2025-32053 It was discovered that libsoup could be made ...

7CVSS6.9AI score0.00779EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2025/04/03 5:36 p.m.•87 views

USN-7414-1: XZ Utils vulnerability

Harri K. Koskinen discovered that XZ Utils incorrectly handled the threaded xz decoder. If a user or automated system were tricked into processing an xz file, a remote attacker could use this issue to cause XZ Utils to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.7CVSS7.2AI score0.00647EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2025/04/01 3:25 p.m.•87 views

USN-7261-2: Vim vulnerability

USN-7261-1 fixed vulnerabilities in Vim. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of...

5.5CVSS5.5AI score0.00276EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2025/02/27 1:14 p.m.•87 views

USN-7207-2: Git vulnerabilities

USN-7207-1 fixed vulnerabilities in Git. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to mislead the user into typi...

7.5CVSS7.4AI score0.01057EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2025/02/24 12:32 p.m.•87 views

USN-7287-1: libcap2 vulnerability

Tianjia Zhang discovered the libcap2 PAM module pamcap incorrectly handled parsing group names in the configuration file. This could result in certain users being granted capabilities, contrary to expectations...

6.1CVSS6.7AI score0.00156EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2025/02/20 5:46 p.m.•87 views

USN-7279-1: WebKitGTK vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

8.8CVSS7AI score0.02902EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2024/04/29 2:19 p.m.•87 views

USN-6757-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled PHPCLISERVERWORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2022-4900 It was discovered that PHP incorrectly handled certain...

6.5CVSS7.1AI score0.3786EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2024/03/20 2:23 p.m.•87 views

USN-6704-1: Linux kernel vulnerabilities

It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly handle return values in certain error conditions. A local attacker could use this to cause a denial of service system crash. CVE-2023-23000 Quentin Minster discovered that the KSMBD...

7.8CVSS7.6AI score0.28058EPSS
SaveExploits16
Ubuntu
Ubuntu
•added 2024/02/08 12:9 a.m.•87 views

USN-6626-1: Linux kernel vulnerabilities

Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel when handling sessions operations. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-32250, CVE-2023-32252, CVE-2023-32257...

9CVSS7.2AI score0.0406EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2024/01/30 9:18 p.m.•87 views

USN-6609-2: Linux kernel (NVIDIA) vulnerabilities

Lin Ma discovered that the netfilter subsystem in the Linux kernel did not properly validate network family support while creating a new netfilter table. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6040 It was discovered that the CIFS...

7.8CVSS7.2AI score0.00843EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2023/12/06 12:11 p.m.•87 views

USN-6535-1: curl vulnerabilities

Harry Sintonen discovered that curl incorrectly handled mixed case cookie domains. A remote attacker could possibly use this issue to set cookies that get sent to different and unrelated sites and domains. CVE-2023-46218 Maksymilian Arciemowicz discovered that curl incorrectly handled long file...

6.5CVSS6.5AI score0.01685EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2023/11/21 3:42 p.m.•87 views

USN-6500-1: Squid vulnerabilities

Joshua Rogers discovered that Squid incorrectly handled validating certain SSL certificates. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. CVE-2023-46724 Joshua...

9.3CVSS6.9AI score0.88351EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2023/10/30 8:42 p.m.•87 views

USN-6460-1: Linux kernel vulnerabilities

It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service excessive CPU consumption. CVE-2023-1206 It was discovered that the Broadcom FullMAC USB WiFi drive...

7.8CVSS7.2AI score0.16642EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2023/10/10 6:18 p.m.•87 views

USN-6427-1: .NET vulnerability

It was discovered that the .NET Kestrel web server did not properly handle HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service...

7.5CVSS7.2AI score0.99999EPSS
SaveExploits21
Ubuntu
Ubuntu
•added 2023/10/03 6:4 p.m.•87 views

USN-6409-1: GNU C Library vulnerabilities

It was discovered that the GNU C Library incorrectly handled the GLIBCTUNABLES environment variable. An attacker could possibly use this issue to perform a privilege escalation attack. CVE-2023-4911 It was discovered that the GNU C Library incorrectly handled certain DNS responses when the system...

7.8CVSS7AI score0.81422EPSS
SaveExploits29
Ubuntu
Ubuntu
•added 2023/09/13 2:54 p.m.•87 views

USN-6365-1: Open VM Tools vulnerability

It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker could possibly use this issue to bypass SAML token signature verification and perform VMware Tools Guest Operations...

7.5CVSS7AI score0.01193EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2023/08/29 5:18 p.m.•87 views

USN-6314-1: Linux kernel vulnerabilities

It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...

7.8CVSS7AI score0.00491EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2023/08/11 4:7 p.m.•87 views

USN-6284-1: Linux kernel vulnerabilities

It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...

7.8CVSS7AI score0.00491EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2023/08/11 2:36 p.m.•87 views

USN-6283-1: Linux kernel vulnerabilities

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 Zheng Zhang discovered that the...

9.8CVSS7.4AI score0.0406EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2023/07/28 1:46 p.m.•87 views

USN-6261-1: Linux kernel (IoT) vulnerabilities

It was discovered that the IP-VLAN network driver for the Linux kernel did not properly initialize memory in some situations, leading to an out-of- bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-3090 Sh...

7.8CVSS7.7AI score0.10362EPSS
SaveExploits15
Ubuntu
Ubuntu
•added 2023/06/22 2:53 p.m.•87 views

USN-6188-1: OpenSSL vulnerability

Matt Caswell discovered that OpenSSL incorrectly handled certain ASN.1 object identifiers. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service...

6.5CVSS7.1AI score0.75116EPSS
SaveExploits0
Total number of security vulnerabilities5000