Ubuntu 16.04

🟢 Low   ⏱ 5–15 min  Last verified: 7 November 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7168-1 Related CVEs: CVE-2023-0341 CVE-2024-53849 Upstream summary: It was discovered that EditorConfig improperly managed memory when handling certain inputs, leading to overflows. An attacker could possibly use these issues to […]

🟠 High   ⏱ 15–60 min  Last verified: 5 November 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7267-1 Related CVEs: CVE-2024-50612 CVE-2022-33065 CVE-2021-4156 CVE-2021-3246 CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634  +12 more Upstream summary: It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 November 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6731-1 Related CVEs: CVE-2017-17042 CVE-2019-1020001 CVE-2024-27285 Upstream summary: It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct […]

🟠 High   ⏱ 15–60 min  Last verified: 30 October 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7223-1 Related CVEs: CVE-2024-56826 CVE-2024-56827 CVE-2021-29338 CVE-2021-3575 CVE-2022-1122 CVE-2023-39327 CVE-2020-6851 CVE-2020-8112  +12 more Upstream summary: Frank Zeng discovered that OpenJPEG incorrectly handled memory when using the decompression utility. An attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 28 October 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7258-1 Related CVEs: CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 CVE-2024-43411 CVE-2018-9861 CVE-2020-9281 CVE-2021-32809  +2 more Upstream summary: Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 October 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6676-1 Related CVEs: CVE-2024-25629 CVE-2023-31130 CVE-2023-32067 CVE-2021-3672 CVE-2017-1000381 CVE-2016-5180 Upstream summary: Vojtěch Vobr discovered that c-ares incorrectly handled user input from local configuration files. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 October 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6990-1 Related CVEs: CVE-2024-39844 CVE-2019-12816 Upstream summary: Johannes Kuhn (DasBrain) discovered that znc incorrectly handled user input under certain operations. An attacker could possibly use this issue to execute arbitrary […]

🟠 High   ⏱ 15–60 min  Last verified: 10 October 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6945-1 Related CVEs: CVE-2024-5290 https://launchpad.net/bugs/2067613 CVE-2021-27803 CVE-2020-12695 CVE-2021-0326 CVE-2019-16275 CVE-2019-11555 CVE-2016-10743  +12 more Upstream summary: Rory McNamara discovered that wpa_supplicant could be made to load arbitrary shared objects by unprivileged […]

🟠 High   ⏱ 15–60 min  Last verified: 7 October 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7014-2 Related CVEs: CVE-2024-7347 CVE-2022-41741 CVE-2022-41742 CVE-2020-11724 CVE-2020-36309 CVE-2021-3618 CVE-2017-20005 CVE-2021-23017  +11 more Upstream summary: USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding updates for Ubuntu 16.04 […]