Lucene search
+L
UbuntuMost viewed

11365 matches found

Ubuntu
Ubuntu
•added 2010/09/16 9:43 p.m.•80 views

USN-975-2: Firefox and Xulrunner regression

USN-975-1 fixed vulnerabilities in Firefox and Xulrunner. Some users reported stability problems under certain circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Several dangling pointer vulnerabilities were discovered in Firefox. An...

8.9AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2010/06/29 8:41 p.m.•80 views

USN-930-1: Firefox and Xulrunner vulnerabilities

If was discovered that Firefox could be made to access freed memory. If a user were tricked into viewing a malicious site, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubuntu 8.0...

10CVSS8.7AI score0.11418EPSS
SaveExploits9
Ubuntu
Ubuntu
•added 2009/11/12 1:28 p.m.•80 views

USN-858-1: OpenLDAP vulnerability

It was discovered that OpenLDAP did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

4.3CVSS5.4AI score0.03273EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2009/07/13 7:27 p.m.•80 views

USN-802-1: Apache vulnerabilities

It was discovered that modproxyhttp did not properly handle a large amount of streamed data when used as a reverse proxy. A remote attacker could exploit this and cause a denial of service via memory resource consumption. This issue affected Ubuntu 8.04 LTS, 8.10 and 9.04. CVE-2009-1890 It was...

7.1CVSS7.6AI score0.17111EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2009/04/15 4:36 p.m.•80 views

USN-758-1: udev vulnerabilities

Sebastian Krahmer discovered that udev did not correctly validate netlink message senders. A local attacker could send specially crafted messages to udev in order to gain root privileges. CVE-2009-1185 Sebastian Krahmer discovered a buffer overflow in the path encoding routines in udev. A local...

7.2CVSS7.9AI score0.80416EPSS
SaveExploits13
Ubuntu
Ubuntu
•added 2009/01/06 1:24 a.m.•80 views

USN-703-1: xterm vulnerabilities

Paul Szabo discovered that the DECRQSS escape sequences were not handled correctly by xterm. Additionally, window title operations were also not safely handled. If a user were tricked into viewing a specially crafted series of characters while in xterm, a remote attacker could execute arbitrary...

9.3CVSS7.3AI score0.0747EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2008/09/30 8:31 p.m.•80 views

USN-648-1: nasm vulnerability

Philipp Thomas discovered that the ppscan function of nasm contained an off-by-one error. If a user or automated system were tricked into assembling a specially crafted ASM file, a remote attacker could execute arbitrary commands with user privileges...

6.8CVSS5.4AI score0.10471EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2007/11/15 8:22 p.m.•80 views

USN-542-2: KOffice vulnerabilities

USN-542-1 fixed a vulnerability in poppler. This update provides the corresponding updates for KWord, part of KOffice. Original advisory details: Secunia Research discovered several vulnerabilities in poppler. If a user were tricked into loading a specially crafted PDF file, a remote attacker cou...

9.3CVSS7AI score0.0702EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2007/05/24 9:48 p.m.•80 views

USN-464-1: Linux kernel vulnerabilities

Philipp Richter discovered that the AppleTalk protocol handler did not sufficiently verify the length of packets. By sending a crafted AppleTalk packet, a remote attacker could exploit this to crash the kernel. CVE-2007-1357 Gabriel Campana discovered that the doipv6setsockopt function did not...

7.8CVSS5.4AI score0.13529EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2005/04/06 7:49 p.m.•80 views

USN-109-1: MySQL vulnerability

USN-32-1 fixed a database privilege escalation vulnerability; original advisory text: "If a user was granted privileges to a database with a name containing an underscore "", the user also gained the ability to grant privileges to other databases with similar names. CAN-2004-0957" Recently a corn...

6.8CVSS5.3AI score0.02425EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2005/04/01 6:14 p.m.•80 views

USN-103-1: Linux kernel vulnerabilities

Mathieu Lafon discovered an information leak in the ext2 file system driver. When a new directory was created, the ext2 block written to disk was not initialized, so that previous memory contents which could contain sensitive data like passwords became visible on the raw device. This is...

7.2CVSS6.7AI score0.13429EPSS
SaveExploits7
Ubuntu
Ubuntu
•added 2005/03/03 6:42 p.m.•80 views

USN-90-1: Imagemagick vulnerability

Tavis Ormandy discovered a format string vulnerability in ImageMagick's file name handling. Specially crafted file names could cause a program using ImageMagick to crash, or possibly even cause execution of arbitrary code. Since ImageMagick can be used in custom printing systems, this also might...

7.5CVSS6.1AI score0.04219EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2004/12/22 7:53 p.m.•80 views

USN-45-1: nasm vulnerability

Jonathan Rockway discovered a locally exploitable buffer overflow in the error function of nasm. If an attacker tricked a user into assembling a malicious source file, they could exploit this to execute arbitrary code with the privileges of the user that runs nasm...

10CVSS5.7AI score0.17882EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2004/11/10 9:13 a.m.•80 views

USN-22-1: samba vulnerability

Karol Wiesek discovered a Denial of Service vulnerability in samba. A flaw in the input validation routines used to match filename strings containing wildcard characters may allow a remote user to consume more than normal amounts of CPU resources, thus impacting the performance and response of th...

5CVSS8.2AI score0.04906EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2025/04/23 4:57 p.m.•79 views

USN-7454-1: libarchive vulnerabilities

It was discovered that the libarchive bsdunzip utility incorrectly handled certain ZIP archive files. If a user or automated system were tricked into processing a specially crafted ZIP archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or...

7.8CVSS6AI score0.00367EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2024/02/28 5:52 p.m.•79 views

USN-6653-2: Linux kernel (AWS) vulnerabilities

It was discovered that a race condition existed in the ATM Asynchronous Transfer Mode subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-51780 It was...

7.8CVSS7AI score0.01999EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2023/12/07 4:07 a.m.•79 views

USN-6540-1: BlueZ vulnerability

It was discovered that BlueZ did not properly restrict non-bonded devices from injecting HID events into the input subsystem. This could allow a physically proximate attacker to inject keystrokes and execute arbitrary commands whilst the device is discoverable...

6.3CVSS6.9AI score0.07879EPSS
SaveExploits9
Ubuntu
Ubuntu
•added 2023/11/27 1:41 p.m.•79 views

USN-6516-1: Linux kernel (Intel IoTG) vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao and...

9.8CVSS7.5AI score0.01052EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2023/11/14 10:15 p.m.•79 views

USN-6479-1: Linux kernel (OEM) vulnerabilities

Kyle Zeng discovered that the netfilter subsystem in the Linux kernel contained a race condition in IP set operations in certain situations. A local attacker could use this to cause a denial of service system crash. CVE-2023-42756 Alex Birnberg discovered that the netfilter subsystem in the Linux...

7.8CVSS6.8AI score0.00418EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2023/10/25 4:47 p.m.•79 views

USN-6452-1: Vim vulnerabilities

It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. CVE-2023-3896 It was discovered that Vim did not properly manage memory. An attacker could possibly use this issue to cause a...

7.8CVSS6.9AI score0.0119EPSS
SaveExploits12
Ubuntu
Ubuntu
•added 2023/10/19 8:10 p.m.•79 views

USN-6441-1: Linux kernel vulnerabilities

Ross Lagerwall discovered that the Xen netback backend driver in the Linux kernel did not properly handle certain unusual packets from a paravirtualized network frontend, leading to a buffer overflow. An attacker in a guest VM could use this to cause a denial of service host system crash or...

7.8CVSS7.5AI score0.00613EPSS
SaveExploits5
Ubuntu
Ubuntu
•added 2023/09/21 3:30 p.m.•79 views

USN-6394-1: Python vulnerability

It was discovered that Python incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

7.5CVSS7.9AI score0.01771EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2023/08/31 10:45 p.m.•79 views

USN-6332-1: Linux kernel (Azure) vulnerabilities

Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 William Zhao discovered that the Traffic Control T...

10CVSS7.2AI score0.05188EPSS
SaveExploits10
Ubuntu
Ubuntu
•added 2023/05/18 9:35 a.m.•79 views

USN-6087-1: Ruby vulnerabilities

It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. CVE-2023-28755 It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possily use this issue to cause a deni...

5.3CVSS7.6AI score0.02637EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2023/04/13 5:23 p.m.•79 views

USN-6016-1: thenify vulnerability

It was discovered that thenify incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code...

9.8CVSS8.3AI score0.02022EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2023/02/27 12:44 p.m.•79 views

USN-5892-1: NSS vulnerabilities

It was discovered that NSS incorrectly handled client authentication without a user certificate in the database. A remote attacker could possibly use this issue to cause a NSS client to crash, resulting in a denial of service. This issue only affected Ubuntu 22.10. CVE-2022-3479 Christian Holler...

8.8CVSS7.8AI score0.00817EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/11/18 9:16 p.m.•79 views

USN-5729-2: Linux kernel vulnerabilities

It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service system crash. CVE-2022-20422 Hsin-Wei Hung discovered that the BPF subsystem in the Linux kernel contained an...

7.8CVSS6.9AI score0.00426EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2022/10/07 1:05 p.m.•79 views

USN-5371-3: nginx vulnerability

USN-5371-1 and USN-5371-2 fixed several vulnerabilities in nginx. This update provides the corresponding update for CVE-2020-11724 for Ubuntu 16.04 ESM. Original advisory details: It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this issue to perfo...

7.5CVSS6.9AI score0.02592EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/09/02 9:48 p.m.•79 views

USN-5595-1: Linux kernel vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 It was discovered that the virtual terminal driver in the...

6.8CVSS7.1AI score0.00611EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/09/01 5:21 p.m.•79 views

USN-5591-2: Linux kernel (HWE) vulnerability

It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

6.8CVSS7AI score0.00611EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/05/11 8:22 a.m.•79 views

USN-5410-1: NSS vulnerability

Lenny Wang discovered that NSS incorrectly handled certain messages. A remote attacker could possibly use this issue to cause servers compiled with NSS to stop responding, resulting in a denial of service...

7.5CVSS8AI score0.03901EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/05/09 5:55 a.m.•79 views

USN-5244-2: DBus vulnerability

USN-5244-1 fixed a vulnerability in DBus. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same...

7.8CVSS7.4AI score0.00331EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2022/04/20 9:36 p.m.•79 views

USN-5382-1: libinput vulnerability

Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly handle input devices with specially crafted names. A local attacker with physical access could use this to cause libinput to crash or expose sensitive information...

7.8CVSS7.1AI score0.0038EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2020/11/03 4:12 p.m.•79 views

USN-4615-1: Yerase's TNEF vulnerabilities

It was discovered that Yerase's TNEF had null pointer dereferences, infinite loop, buffer overflow, out of bounds reads, directory traversal issues and other vulnerabilities. An attacker could use those issues to cause a crash and consequently a denial of service. CVE-2017-6298, CVE-2017-6299,...

7.8CVSS6.9AI score0.02111EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2020/09/17 10:08 p.m.•79 views

USN-4519-1: PulseAudio vulnerability

Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of service, or possibly execute arbitrary code...

6.1CVSS6.7AI score0.00298EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2020/08/12 1:42 p.m.•79 views

USN-4456-1: Dovecot vulnerabilities

It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to cause Dovecot to consume resources, resulting in a denial of service. CVE-2020-12100 It was discovered that Dovecot incorrectly handled memory when using NTLM. A remote...

7.5CVSS6.8AI score0.06187EPSS
SaveExploits4
Ubuntu
Ubuntu
•added 2020/05/28 7:06 p.m.•79 views

USN-4359-2: APT vulnerability

USN-4359-1 fixed a vulnerability in APT. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: It was discovered that APT incorrectly handled certain filenames during package installation. If an attacker could provide a specially crafted...

5.5CVSS6.3AI score0.01338EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2020/04/14 7:26 p.m.•79 views

USN-4329-1: Git vulnerability

Felix Wilhelm discovered that Git incorrectly handled certain URLs that included newlines. A remote attacker could possibly use this issue to trick Git into returning credential information for a wrong host...

9.3CVSS7.1AI score0.10047EPSS
SaveExploits2
Ubuntu
Ubuntu
•added 2020/01/30 1:06 p.m.•79 views

USN-4262-1: OpenStack Keystone vulnerability

Daniel Preussker discovered that OpenStack Keystone incorrectly handled the list credentials API. A user with a role on the project could use this issue to view any other user's credentials...

8.8CVSS7AI score0.0178EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2019/02/26 2:20 p.m.•79 views

USN-3894-1: GNOME Keyring vulnerability

It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module. A local attacker could possibly use this issue to discover login credentials...

7.8CVSS7.4AI score0.01483EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2019/01/24 9:16 p.m.•79 views

USN-3868-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restrictions, or execute arbitrary code...

9.8CVSS8.1AI score0.09646EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2018/12/03 7:40 p.m.•79 views

USN-3836-1: Linux kernel vulnerabilities

Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside nested user namespaces in some situations. A local attacker could use this to bypass access controls on resources outside the namespace. CVE-2018-18955 Philipp Wendler discovered that the overlayfs implementati...

7CVSS6.9AI score0.07611EPSS
SaveExploits25
Ubuntu
Ubuntu
•added 2018/11/30 6:31 a.m.•79 views

USN-3833-1: Linux kernel (AWS) vulnerabilities

Jann Horn discovered that the Linux kernel mishandles mapping UID or GID ranges inside nested user namespaces in some situations. A local attacker could use this to bypass access controls on resources outside the namespace. CVE-2018-18955 Philipp Wendler discovered that the overlayfs implementati...

7CVSS6.9AI score0.07611EPSS
SaveExploits25
Ubuntu
Ubuntu
•added 2018/09/12 10:13 p.m.•79 views

USN-3747-2: OpenJDK 10 regression

USN-3747-1 fixed vulnerabilities in OpenJDK 10 for Ubuntu 18.04 LTS. Unfortunately, that update introduced a regression around accessability support that prevented some Java applications from starting. This update fixes the problem. We apologize for the inconvenience. Original advisory details: I...

6.6AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2018/08/20 5:25 p.m.•79 views

USN-3746-1: APT vulnerability

It was discovered that APT incorrectly handled the mirror method mirror://. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages in environments configured to use mirror:// entries...

5.9CVSS5.9AI score0.00954EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2018/03/28 5:46 p.m.•79 views

USN-3610-1: ICU vulnerability

It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service...

6.5CVSS7.5AI score0.02479EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2018/03/13 2:28 p.m.•79 views

USN-3595-1: Samba vulnerabilities

Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users. CVE-2018-1057 It was discovered that...

8.8CVSS7AI score0.1004EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2017/09/18 11:26 p.m.•79 views

USN-3423-1: Linux kernel vulnerability

It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically proximate attacker could use this to cause a denial of service system crash...

8CVSS7.2AI score0.16181EPSS
SaveExploits12
Ubuntu
Ubuntu
•added 2017/09/18 10:29 p.m.•79 views

USN-3419-1: Linux kernel vulnerabilities

It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2017-1000251 It was discovered that a buffer overflow existed in t...

8CVSS7.5AI score0.16181EPSS
SaveExploits12
Ubuntu
Ubuntu
•added 2017/08/07 4:53 p.m.•79 views

USN-3380-1: FreeRDP vulnerabilities

It was discovered that FreeRDP incorrectly handled certain width and height values. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS. CVE-2014-0250 It was discovered...

8.8CVSS7.5AI score0.0367EPSS
SaveExploits7
Total number of security vulnerabilities5000