Lucene search
+L
UbuntuMost viewed

11213 matches found

Ubuntu
Ubuntu
•added 2015/04/08 10:27 p.m.•86 views

USN-2563-1: Linux kernel vulnerabilities

Sun Baoliang discovered a use after free flaw in the Linux kernel's SCTP Stream Control Transmission Protocol subsystem during INIT collisions. A remote attacker could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges on the system. CVE-2015-1421...

10CVSS6.7AI score0.09828EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/04/08 10:23 p.m.•86 views

USN-2561-1: Linux kernel (OMAP4) vulnerabilities

It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service system crash or to potentially gain administrative privileges...

6.9CVSS6.6AI score0.03814EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/03/24 12:44 p.m.•86 views

USN-2547-1: Mono vulnerabilities

It was discovered that the Mono TLS implementation was vulnerable to the SKIP-TLS vulnerability. A remote attacker could possibly use this issue to perform client impersonation attacks. CVE-2015-2318 It was discovered that the Mono TLS implementation was vulnerable to the FREAK vulnerability. A...

9.8CVSS7.9AI score0.03539EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2015/01/27 8:56 p.m.•86 views

USN-2486-1: OpenJDK 6 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,...

10CVSS6.5AI score0.99999EPSS
SaveExploits13
Ubuntu
Ubuntu
•added 2015/01/13 11:43 a.m.•86 views

USN-2465-1: Linux kernel (Trusty HWE) vulnerabilities

A null pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service system crash via a malformed INIT chunk. CVE-2014-7841 A race condition with MMIO and PIO transactions in the KV...

6.1CVSS6.8AI score0.0523EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2014/12/02 8:24 p.m.•86 views

USN-2424-1: Firefox vulnerabilities

Gary Kwong, Randell Jesup, Nils Ohlmeier, Jesse Ruderman, Max Jonas Werner, Christian Holler, Jon Coppeard, Eric Rahm, Byron Campen, Eric Rescorla, and Xidorn Quan discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker...

6.8CVSS8.4AI score0.04052EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2014/10/09 10:55 a.m.•86 views

USN-2378-1: Linux kernel (Trusty HWE) vulnerabilities

Steven Vittitoe reported multiple stack buffer overflows in Linux kernel's magicmouse HID driver. A physically proximate attacker could exploit this flaw to cause a denial of service system crash or possibly execute arbitrary code via specially crafted devices. CVE-2014-3181 Ben Hawkes reported...

7.8CVSS7.1AI score0.06167EPSS
SaveExploits8
Ubuntu
Ubuntu
•added 2014/07/17 12:40 a.m.•86 views

USN-2286-1: Linux kernel (Raring HWE) vulnerabilities

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Michael S. Tsirkin discovered an information leak in the Linux kernel's...

7.5CVSS7AI score0.05421EPSS
SaveExploits16
Ubuntu
Ubuntu
•added 2014/06/23 11:52 a.m.•86 views

USN-2232-3: OpenSSL regression

USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for CVE-2014-0224 caused a regression for certain applications that use renegotiation, such as PostgreSQL. This update fixes the problem. Original advisory details: Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS...

7.6AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2014/06/12 6:47 p.m.•86 views

USN-2232-2: OpenSSL regression

USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for CVE-2014-0224 caused a regression for certain applications that use tlssessionsecretcb, such as wpasupplicant. This update fixes the problem. Original advisory details: Jüri Aedla discovered that OpenSSL incorrectly handled invalid...

7.6AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2014/05/15 5:26 p.m.•86 views

USN-2214-1: libxml2 vulnerability

Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service...

4.3CVSS7AI score0.08137EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2014/02/18 10:59 p.m.•86 views

USN-2115-1: Linux kernel (OMAP4) vulnerabilities

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 A flaw in the handling of memory regions of the kernel virtual machine KVM subsystem was discovered. ...

4.7CVSS6.8AI score0.00654EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2014/01/03 10:44 a.m.•86 views

USN-2067-1: Linux kernel (OMAP4) vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged...

8.8CVSS7.4AI score0.39711EPSS
SaveExploits18
Ubuntu
Ubuntu
•added 2013/12/03 7:38 p.m.•86 views

USN-2045-1: Linux kernel vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Alan Chester reported a flaw in the IPv6 Stream Control Transmission Protocol SCTP of the Linux kernel. A...

6.1CVSS6.8AI score0.04144EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2013/10/01 3:02 p.m.•86 views

USN-1983-1: Python 2.7 vulnerabilities

Florian Weimer discovered that Python incorrectly handled matching multiple wildcards in ssl certificate hostnames. An attacker could exploit this to cause Python to consume resources, resulting in a denial of service. This issue only affected Ubuntu 13.04. CVE-2013-2099 Ryan Sleevi discovered th...

4.3CVSS7.4AI score0.05347EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2013/05/16 1:44 a.m.•86 views

USN-1825-1: Linux kernel vulnerability

An flaw was discovered in the Linux kernel's perfevents interface. A local user could exploit this flaw to escalate privileges on the system...

8.4CVSS7.6AI score0.47709EPSS
SaveExploits16
Ubuntu
Ubuntu
•added 2013/05/15 5:17 p.m.•86 views

USN-1824-1: Linux kernel vulnerabilities

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

6.9CVSS6.9AI score0.0082EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2013/04/23 9:00 p.m.•86 views

USN-1806-1: OpenJDK 7 vulnerabilities

Ben Murphy discovered a vulnerability in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to execute arbitrary code. CVE-2013-0401 James Forshaw discovered a vulnerability in the OpenJDK JRE related to information disclosure, data integrity and...

10CVSS7.5AI score0.87227EPSS
SaveExploits22
Ubuntu
Ubuntu
•added 2013/03/05 11:01 p.m.•86 views

USN-1755-1: OpenJDK 6 vulnerabilities

It was discovered that OpenJDK did not properly validate certain types of images. A remote attacker could exploit this to cause OpenJDK to crash. CVE-2013-0809 It was discovered that OpenJDK did not properly check return values when performing color conversion for images. If a user were tricked...

10CVSS8.6AI score0.86151EPSS
SaveExploits10
Ubuntu
Ubuntu
•added 2013/02/13 5:45 p.m.•86 views

USN-1722-1: jQuery vulnerability

It was discovered that jQuery incorrectly handled selecting elements using location.hash, resulting in a possible cross-site scripting XSS issue. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify...

4.3CVSS7AI score0.19191EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2012/03/23 9:57 a.m.•86 views

USN-1401-2: Thunderbird vulnerabilities

USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. Original advisory details: It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a...

9.3CVSS8.7AI score0.69628EPSS
SaveExploits11References1
Ubuntu
Ubuntu
•added 2012/01/23 9:47 p.m.•86 views

USN-1340-1: Linux kernel (Oneiric backport) vulnerabilities

Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. CVE-2011-2203 A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain ro...

7.8CVSS7.1AI score0.00535EPSS
SaveExploits7
Ubuntu
Ubuntu
•added 2012/01/11 10:56 a.m.•86 views

USN-1325-1: Linux kernel (OMAP4) vulnerabilities

Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel...

7.8CVSS6.5AI score0.03228EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2011/12/08 11:36 a.m.•86 views

USN-1293-1: Linux kernel vulnerabilities

A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. CVE-2011-4077 Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions...

7.2CVSS6.2AI score0.03212EPSS
SaveExploits6
Ubuntu
Ubuntu
•added 2011/09/13 8:12 p.m.•86 views

USN-1203-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

7.8CVSS6.8AI score0.08793EPSS
SaveExploits24
Ubuntu
Ubuntu
•added 2011/08/17 6:13 p.m.•86 views

USN-1192-2: Mozvoikko update

USN-1192-1 fixed vulnerabilities in Firefox. This update provides an updated Mozvoikko for use with Firefox 6. Original advisory details: Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privilege...

9AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2011/06/29 10:57 p.m.•86 views

USN-1149-2: Firefox regression

USN-1149-1 fixed vulnerabilities in Firefox. Unfortunately, a regression was introduced that prevented cookies from being stored properly when the hostname was a single character. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple memory...

9AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2011/05/05 7:19 a.m.•86 views

USN-1122-1: Thunderbird vulnerabilities

It was discovered that there was a vulnerability in the memory handling of certain types of content. An attacker could exploit this to possibly run arbitrary code as the user running Thunderbird. CVE-2011-0081 It was discovered that Thunderbird incorrectly handled certain JavaScript requests. If...

10CVSS8.8AI score0.73835EPSS
SaveExploits29
Ubuntu
Ubuntu
•added 2011/02/11 1:27 a.m.•86 views

USN-1061-1: iTALC vulnerability

Stéphane Graber discovered that the iTALC private keys shipped with the Edubuntu Live DVD were not correctly regenerated once Edubuntu was installed. If an iTALC client was installed with the vulnerable keys, a remote attacker could gain control of the system. Only systems using keys from the...

9.3CVSS5.3AI score0.0293EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2011/02/03 7:23 p.m.•86 views

USN-1057-1: Linux kernel vulnerabilities

Dave Chinner discovered that the XFS filesystem did not correctly order inode lookups when exported by NFS. A remote attacker could exploit this to read or write disk blocks that had changed file assignment or had become unlinked, leading to a loss of privacy. CVE-2010-2943 Dan Rosenberg discover...

8.1CVSS6.6AI score0.17009EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2011/01/12 4:58 a.m.•86 views

USN-1009-2: GNU C Library vulnerability

USN-1009-1 fixed vulnerabilities in the GNU C library. Colin Watson discovered that the fixes were incomplete and introduced flaws with setuid programs loading libraries that used dynamic string tokens in their RPATH. If the "man" program was installed setuid, a local attacker could exploit this ...

8AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2010/05/21 5:03 p.m.•86 views

USN-942-1: PostgreSQL vulnerabilities

It was discovered that the Safe.pm module as used by PostgreSQL did not properly restrict PL/perl procedures. If PostgreSQL was configured to use Perl stored procedures, a remote authenticated attacker could exploit this to execute arbitrary Perl code. CVE-2010-1169 It was discovered that...

8.5CVSS8.5AI score0.04081EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2010/01/13 2:46 p.m.•86 views

USN-882-1: PHP vulnerabilities

Maksymilian Arciemowicz discovered that PHP did not properly handle the inirestore function. An attacker could exploit this issue to obtain random memory contents or to cause the PHP server to crash, resulting in a denial of service. CVE-2009-2626 It was discovered that the htmlspecialchars...

10CVSS4.8AI score0.08306EPSS
SaveExploits11
Ubuntu
Ubuntu
•added 2009/12/10 12:56 a.m.•86 views

USN-869-1: Linux kernel vulnerabilities

David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets. A remote attacker could send specially crafted traffic that would cause a system to crash, leading to a denial of service. The fix was included in the earlier kernels from USN-864-1...

7.8CVSS7.9AI score0.03872EPSS
SaveExploits3
Ubuntu
Ubuntu
•added 2009/07/22 3:25 p.m.•86 views

USN-798-1: Firefox and Xulrunner vulnerabilities

Several flaws were discovered in the Firefox browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-2462,...

10CVSS8.7AI score0.1323EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2009/01/12 3:35 p.m.•86 views

USN-707-1: CUPS vulnerabilities

It was discovered that CUPS didn't properly handle adding a large number of RSS subscriptions. A local user could exploit this and cause CUPS to crash, leading to a denial of service. This issue only applied to Ubuntu 7.10, 8.04 LTS and 8.10. CVE-2008-5183 It was discovered that CUPS did not...

10CVSS7.7AI score0.0921EPSS
SaveExploits10
Ubuntu
Ubuntu
•added 2008/03/19 12:07 a.m.•86 views

USN-587-1: Kerberos vulnerabilities

It was discovered that krb5 did not correctly handle certain krb4 requests. An unauthenticated remote attacker could exploit this flaw by sending a specially crafted traffic, which could expose sensitive information, cause a crash, or execute arbitrary code. CVE-2008-0062, CVE-2008-0063 A flaw wa...

10CVSS8.3AI score0.10141EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2007/09/25 12:13 a.m.•86 views

USN-518-1: linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20 vulnerabilities

Evan Teran discovered that the Linux kernel ptrace routines did not correctly handle certain requests robustly. Local attackers could exploit this to crash the system, causing a denial of service. CVE-2007-3731 It was discovered that hugetlb kernels on PowerPC systems did not prevent the stack fr...

7.2CVSS5.2AI score0.0082EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2006/10/05 2:18 a.m.•86 views

USN-353-2: OpenSSL vulnerability

USN-353-1 fixed several vulnerabilities in OpenSSL. However, Mark J Cox noticed that the applied patch for CVE-2006-2940 was flawed. This update corrects that patch. For reference, this is the relevant part of the original advisory: Certain types of public key could take disproportionate amounts ...

7.8CVSS7.3AI score0.05004EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2006/06/27 10:52 p.m.•86 views

USN-306-1: MySQL 4.1 vulnerability

MySQL did not correctly handle NULL as the second argument to the strtodate function. An authenticated user could exploit this to crash the server...

4CVSS5.2AI score0.24028EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2004/12/17 2:26 a.m.•86 views

USN-40-1: PHP vulnerabilities

Stefan Esser reported several buffer overflows in PHP's variable unserializing handling. These could allow an attacker to execute arbitrary code on the server with the PHP interpreter's privileges by sending specially crafted input strings form data, cookie values, and similar. Additionally, Ilia...

10CVSS8.4AI score0.10042EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2004/11/12 6:56 a.m.•86 views

USN-23-1: apache2 vulnerability

Chintan Trivedi discovered a Denial of Service vulnerability in apache2. The field length limit was not enforced for certain malicious requests. This could allow a remote attacker who is able to send large amounts of data to a server to cause HTTP server instances to consume proportional amounts ...

5CVSS5.5AI score0.55105EPSS
SaveExploits7
Ubuntu
Ubuntu
•added 2025/04/07 1:55 p.m.•85 views

USN-7418-1: Ruby vulnerabilities

It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affected in Ubuntu 22.04 LTS, Ubuntu 24.04...

7.5CVSS7.1AI score0.02064EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2024/10/30 8:52 a.m.•85 views

USN-7085-1: X.Org X Server vulnerability

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations in the X Keyboard Extension. An attacker could use this issue to cause the X Server to crash, leading to a denial of service, or possibly execute arbitrary code...

7.8CVSS7.8AI score0.00903EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2024/08/22 11:54 a.m.•85 views

USN-6979-1: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - M68K architecture; - User-Mode Linux UML; - x86 architecture; - Accessibility subsystem; -...

10CVSS7.3AI score0.02701EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2024/08/21 5:53 p.m.•85 views

USN-6972-1: Linux kernel vulnerabilities

Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer dereference. An attacker could possibly use this to cause a denial of service system crash. CVE-2024-22099 It was discovered that a race condition existed in th...

8.8CVSS6.6AI score0.01177EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2024/06/25 11:07 a.m.•85 views

USN-6846-1: Ansible vulnerabilities

It was discovered that Ansible incorrectly handled certain inputs when using towercallback parameter. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. This issue only affecte...

7.8CVSS7.4AI score0.00766EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2024/03/28 8:44 p.m.•85 views

USN-6707-4: Linux kernel (Azure) vulnerabilities

Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

7.8CVSS7.7AI score0.28058EPSS
SaveExploits16
Ubuntu
Ubuntu
•added 2024/01/08 5:46 p.m.•85 views

USN-6567-1: QEMU vulnerabilities

Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attacker could possibly use this issue to cause QEMU to crash, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2020-14394 It w...

8.8CVSS7.1AI score0.01891EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2023/11/21 3:17 p.m.•85 views

USN-6497-1: Linux kernel (OEM) vulnerabilities

Maxim Levitsky discovered that the KVM nested virtualization SVM implementation for AMD processors in the Linux kernel did not properly handle x2AVIC MSRs. An attacker in a guest VM could use this to cause a denial of service host kernel crash. CVE-2023-5090 Alon Zahavi discovered that the...

8.8CVSS7.4AI score0.09141EPSS
SaveExploits2
Total number of security vulnerabilities5000