Ubuntu 20.04

🟡 Medium   ⏱ 10–30 min  Last verified: 8 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7081-1 Related CVEs: CVE-2024-24791 CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 Upstream summary: It was discovered that the Go net/http module did not properly handle responses to requests with an "Expect: 100-continue" header under […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7444-1 Related CVEs: CVE-2023-32683 CVE-2023-43796 CVE-2022-39374 CVE-2023-41335 CVE-2022-39335 CVE-2023-42453 CVE-2024-31208 CVE-2024-53863 Upstream summary: It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 4 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7346-3 Related CVEs: CVE-2021-42780 CVE-2021-42782 CVE-2023-2977 CVE-2023-40660 CVE-2023-40661 CVE-2024-45615 CVE-2024-45616 CVE-2024-45617  +11 more Upstream summary: USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6984-1 Related CVEs: CVE-2024-42353 Upstream summary: It was discovered that WebOb incorrectly handled certain URLs. An attacker could possibly use this issue to control a redirect or forward to another […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 September 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7250-1 Related CVEs: CVE-2018-18836 CVE-2018-18837 CVE-2018-18838 CVE-2023-22497 CVE-2024-23722 CVE-2024-34250 CVE-2024-34251 Upstream summary: It was discovered that Netdata incorrectly handled parsing JSON input, which could lead to a JSON injection. An […]

🟠 High   ⏱ 15–60 min  Last verified: 13 September 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7226-1 Related CVEs: CVE-2022-46169 CVE-2024-25641 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459  +7 more Upstream summary: It was discovered that Cacti did not properly sanitize the 'poller_id' parameter in the "remote_agent.php" […]

🟠 High   ⏱ 15–60 min  Last verified: 9 September 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7243-1 Related CVEs: CVE-2024-46461 CVE-2023-47359 CVE-2023-47360 CVE-2019-19721 CVE-2020-13428 CVE-2021-25801 CVE-2021-25802 CVE-2021-25803  +2 more Upstream summary: It was discovered that VLC incorrectly handled memory when reading an MMS stream. An attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 8 September 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7272-1 Related CVEs: CVE-2022-24894 CVE-2022-24895 CVE-2023-46734 CVE-2024-50340 CVE-2024-50341 CVE-2024-50342 CVE-2024-50343 CVE-2024-50345  +3 more Upstream summary: Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 September 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7472-1 Related CVEs: CVE-2021-42553 CVE-2024-8946 CVE-2024-8947 Upstream summary: Junwha Hong and Wonil Jang discovered that Micropython incorrectly handled the length of a buffer in mp_vfs_umount, leading to a heap-based buffer […]