Lucene search
+L
UbuntuMost viewed

11213 matches found

Ubuntu
Ubuntu
added 2023/10/19 10:22 p.m.87 views

USN-6443-1: Linux kernel (OEM) vulnerabilities

Kyle Zeng discovered that the networking stack implementation in the Linux kernel did not properly validate skb object size in certain conditions. An attacker could use this cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-42752 Kyle Zeng discovered that the IPv...

7.8CVSS7.1AI score0.00403EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2023/10/09 11:15 a.m.87 views

USN-6421-1: Bind vulnerability

It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service...

7.5CVSS6.8AI score0.02647EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2023/10/04 10:38 p.m.87 views

USN-6416-1: Linux kernel vulnerabilities

It was discovered that the IPv6 implementation in the Linux kernel contained a high rate of hash collisions in connection lookup table. A remote attacker could use this to cause a denial of service excessive CPU consumption. CVE-2023-1206 Daniel Trujillo, Johannes Wikner, and Kaveh Razavi...

9.1CVSS8AI score0.45301EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2023/08/28 10:47 p.m.87 views

USN-6312-1: Linux kernel vulnerabilities

It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...

7.8CVSS7AI score0.00491EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2023/08/17 8:11 p.m.87 views

USN-6301-1: Linux kernel vulnerabilities

It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...

7.8CVSS7AI score0.00491EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2023/07/12 7:09 p.m.87 views

USN-6222-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Jiasheng Jiang discovered that the HSA Linux kernel driver for AMD Radeon GPU devices did not properly validate memory allocation in certain situations, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-3108...

7.8CVSS7.2AI score0.16525EPSS
SaveExploits13
Ubuntu
Ubuntu
added 2023/06/07 10:07 a.m.87 views

USN-6028-2: libxml2 vulnerabilities

USN-6028-1 fixed vulnerabilities in libxml2. This update provides the corresponding updates for Ubuntu 23.04. Original advisory details: It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash. CVE-2022-2309 It was discovere...

7.5CVSS6.6AI score0.02626EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2023/06/01 9:41 p.m.87 views

USN-6134-1: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix for this CVE, kernel support for the...

8.1CVSS7.5AI score0.0788EPSS
SaveExploits19
Ubuntu
Ubuntu
added 2023/05/29 12:12 p.m.87 views

USN-6111-1: Flask vulnerability

It was discovered that Flask incorrectly handled certain data responses. An attacker could possibly use this issue to expose sensitive information...

7.5CVSS7.6AI score0.01261EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2023/05/18 8:22 a.m.87 views

USN-6086-1: minimatch vulnerability

It was discovered that minimatch incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service...

7.5CVSS7.6AI score0.01816EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2023/05/05 10:14 a.m.87 views

USN-6057-1: Linux kernel (Intel IoTG) vulnerabilities

It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-1281 It was discovered that the OverlayFS...

7.8CVSS7.6AI score0.0788EPSS
SaveExploits16
Ubuntu
Ubuntu
added 2023/04/04 8:58 a.m.87 views

USN-5995-1: Vim vulnerabilities

It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possible execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS...

8.4CVSS7AI score0.02177EPSS
SaveExploits30
Ubuntu
Ubuntu
added 2023/03/02 11:42 a.m.87 views

USN-5904-1: SoX vulnerabilities

Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ES...

10CVSS7.1AI score0.02211EPSS
SaveExploits8
Ubuntu
Ubuntu
added 2023/02/14 7:12 p.m.87 views

USN-5870-1: apr-util vulnerability

Ronald Crane discovered that APR-util did not properly handled memory when encoding or decoding certain input data. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...

6.5CVSS6.5AI score0.01417EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2023/01/12 8:28 p.m.87 views

USN-5802-1: Linux kernel vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

8.8CVSS7.7AI score0.22293EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2022/10/14 6:46 p.m.87 views

USN-5682-1: Linux kernel (AWS) vulnerabilities

It was discovered that the BPF verifier in the Linux kernel did not properly handle internal data structures. A local attacker could use this to expose sensitive information kernel memory. CVE-2021-4159 It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2...

7.8CVSS7.2AI score0.00427EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2022/09/21 9:25 a.m.87 views

USN-5622-1: Linux kernel vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 Moshe Ko...

8.2CVSS6.8AI score0.07156EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2022/08/30 9:14 p.m.87 views

USN-5590-1: Linux kernel (OEM) vulnerability

Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service system crash...

7.5CVSS6.6AI score0.07156EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2022/08/24 11:25 a.m.87 views

USN-5578-1: Open VM Tools vulnerability

It was discovered that Open VM Tools incorrectly handled certain requests. An attacker inside the guest could possibly use this issue to gain root privileges inside the virtual machine...

7.8CVSS7AI score0.0054EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2022/08/24 4:14 a.m.87 views

USN-5577-1: Linux kernel (OEM) vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the framebuffer driver on the Linux...

6.7CVSS7.1AI score0.00312EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2022/06/23 8:26 p.m.87 views

USN-5492-1: Vim vulnerability

It was discovered that Vim incorrectly handled memory when opening and searching the contents of certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash...

7.8CVSS7.4AI score0.01481EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2022/06/06 5:23 p.m.87 views

USN-5462-1: Ruby vulnerabilities

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. 2022-28738 It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use th...

9.8CVSS7.7AI score0.0437EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2021/12/08 6:16 p.m.87 views

USN-5183-1: BlueZ vulnerability

Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ to crash, leading to a denial of service, or possibly execute arbitrary code...

8.8CVSS6.8AI score0.0143EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2021/11/11 4:07 p.m.87 views

USN-5144-1: OpenEXR vulnerability

It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

5.5CVSS7AI score0.00881EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2021/03/15 9:11 p.m.87 views

USN-4791-1: Apache Tomcat 7 vulnerabilities

It was discovered that Apache Tomcat 7 did not protect applications from the presence of untrusted client data in an environment variable. A remote attacker could possible use this vulnerability to redirect the traffic to an arbitrary proxy and obtain sensitive information. CVE-2016-5388 It was...

8.1CVSS7.2AI score0.50896EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2021/03/15 9:05 p.m.87 views

USN-4787-1: jq vulnerability

It was discovered that jq did not perform sufficient bounds checking, resulting in unbounded resource consumption. An attacker could use this vulnerability to cause a denial of service...

7.8CVSS7.4AI score0.05333EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2020/12/01 12:38 p.m.87 views

USN-4654-1: PEAR vulnerabilities

It was discovered that PEAR incorrectly sanitized filenames. A remote attacker could possibly use this issue to execute arbitrary code...

7.8CVSS7.9AI score0.84554EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2020/08/10 7:10 p.m.87 views

USN-4454-2: Samba vulnerability

USN-4454-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT...

7.5CVSS7.9AI score0.03539EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2020/07/29 4:40 p.m.87 views

USN-4443-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass iframe sandbox restrictions, confuse the user, or execute arbitrary...

9.3CVSS7.9AI score0.0779EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2020/07/23 8:09 p.m.87 views

USN-4434-1: LibVNCServer vulnerabilities

Ramin Farajpour Cami discovered that LibVNCServer incorrectly handled certain malformed unix socket names. A remote attacker could exploit this with a crafted socket name, leading to a denial of service, or possibly execute arbitrary code. CVE-2019-20839 It was discovered that LibVNCServer did no...

7.5CVSS7.2AI score0.03589EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2020/06/15 1:23 p.m.87 views

USN-4395-1: fwupd vulnerability

Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to install an unsigned firmware...

6CVSS6.1AI score0.0049EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2019/11/07 10:48 p.m.87 views

USN-4179-1: FriBidi vulnerability

Alex Murray discovered a stack-based buffer overflow when handling a large number of unicode isolate directives. An attacker could use this to cause a denial of service or possibly execute arbitrary code...

7.8CVSS8.2AI score0.02182EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2019/11/05 3:43 a.m.87 views

USN-4170-3: Whoopsie regression

USN-4170-1 fixed a vulnerability in Whoopsie and USN-4170-2 fixed a subsequent regression. That update was incomplete and could still result in Whoopsie potentially crashing when uploading crash reports on some architectures. This update fixes the problem. We apologize for the inconvenience...

5.8AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2019/01/17 12:47 p.m.87 views

USN-3862-1: Irssi vulnerability

It was discovered that Irssi incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code...

9.8CVSS8.6AI score0.02543EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2018/08/14 7:58 p.m.87 views

USN-3739-2: libxml2 vulnerabilities

USN-3739-1 fixed a vulnerability in libxml2. This update provides the corresponding update for Ubuntu 12.04. Original advisory details: Matias Brutti discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information...

7.5CVSS7AI score0.0365EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2018/07/02 8:05 p.m.87 views

USN-3697-2: Linux kernel (OEM) vulnerabilities

It was discovered that a null pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash. CVE-2018-1130 Jann Horn discovered that the 32 bit adjtimex syscall implementation for 64 bit...

7.8CVSS6.4AI score0.0172EPSS
SaveExploits7
Ubuntu
Ubuntu
added 2018/07/02 7:45 p.m.87 views

USN-3696-2: Linux kernel (Xenial HWE) vulnerabilities

USN-3696-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that an integer overflow existed in the perf subsystem of the Linux...

7.8CVSS7.1AI score0.01912EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2018/06/18 11:51 a.m.87 views

USN-3687-1: WebKitGTK+ vulnerabilities

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

8.8CVSS7.2AI score0.53337EPSS
SaveExploits24
Ubuntu
Ubuntu
added 2018/05/25 8:41 p.m.87 views

USN-3660-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service via application crash, install lightweight themes without user interaction, or...

9.8CVSS7.8AI score0.21036EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2018/02/22 8:46 a.m.87 views

USN-3581-2: Linux kernel (HWE) vulnerabilities

USN-3581-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contain...

7.8CVSS7.4AI score0.74041EPSS
SaveExploits15
Ubuntu
Ubuntu
added 2018/01/29 10:37 p.m.87 views

USN-3529-1: Thunderbird vulnerabilities

It was discovered that a From address encoded with a null character is cut off in the message header display. An attacker could potentially exploit this to spoof the sender address. CVE-2017-7829 It was discovered that it is possible to execute JavaScript in RSS feeds in some circumstances. If a...

9.8CVSS7.7AI score0.0717EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2017/09/18 10:42 p.m.87 views

USN-3420-2: Linux kernel (Xenial HWE) vulnerabilities

USN-3420-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux...

10CVSS7.6AI score0.16181EPSS
SaveExploits12
Ubuntu
Ubuntu
added 2017/08/17 4:58 p.m.87 views

USN-3393-1: ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain e-mail messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2017-6418 It was discovered that ClamAV incorrectly handled certain malformed CHM files. A remote...

7.8CVSS7.2AI score0.01976EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2017/08/03 5:38 p.m.87 views

USN-3378-2: Linux kernel (Xenial HWE) vulnerabilities

USN-3378-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs...

7.8CVSS6.8AI score0.03763EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2017/08/03 5:14 p.m.87 views

USN-3377-2: Linux kernel (HWE) vulnerabilities

USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename...

7.8CVSS6.8AI score0.03763EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2017/08/03 4:52 p.m.87 views

USN-3378-1: Linux kernel vulnerabilities

Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in the Linux kernel. An unprivileged local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2017-7533 It was discovered that the Linux kernel did n...

7.8CVSS6.8AI score0.03763EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2017/07/21 9:59 a.m.87 views

USN-3361-1: Linux kernel (HWE) vulnerabilities

USN-3358-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Please note that this update changes the Linux HWE kernel to the 4.10 based kernel from Ubuntu...

10CVSS7.4AI score0.1081EPSS
SaveExploits9
Ubuntu
Ubuntu
added 2017/04/25 12:01 p.m.87 views

USN-3268-1: QEMU vulnerabilities

Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2016-10028 It was discovered that QEMU incorrectly handled the JAZZ RC4030 device. A privileged attacker...

9.9CVSS7.7AI score0.04448EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2016/10/13 10:26 p.m.87 views

USN-3097-2: Linux kernel (OMAP4) vulnerabilities

Marco Grassi discovered a use-after-free condition could occur in the TCP retransmit queue handling code in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2016-6828 Pengfei Wang discovered a race condition in the...

5.5CVSS6.5AI score0.01181EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2016/07/27 6:58 a.m.87 views

USN-3043-1: OpenJDK 8 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-3587, CVE-2016-3598,...

9.6CVSS7.5AI score0.0669EPSS
SaveExploits0
Total number of security vulnerabilities5000