Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 28 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6790-1 Related CVEs: CVE-2024-28054 Upstream summary: It was discovered that amavisd-new incorrectly handled certain MIME email messages with multiple boundary parameters. A remote attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7224-1 Related CVEs: CVE-2019-18928 CVE-2021-33582 CVE-2024-34055 Upstream summary: It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8191-1 Related CVEs: CVE-2024-47554 CVE-2021-29425 Upstream summary: It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6942-1 Related CVEs: CVE-2023-52159 Upstream summary: It was discovered that Gross incorrectly handled memory when composing log entries. An attacker could possibly use this issue to cause Gross to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6843-1 Related CVEs: CVE-2024-36041 Upstream summary: Fabian Vogt discovered that Plasma Workspace incorrectly handled connections via ICE. A local attacker could possibly use this issue to gain access to another […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6855-1 Related CVEs: CVE-2024-36600 Upstream summary: Mansour Gashasbi discovered that libcdio incorrectly handled certain memory operations when parsing an ISO file, leading to a buffer overflow vulnerability. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7441-1 Related CVEs: CVE-2024-10525 CVE-2024-3935 CVE-2021-34431 CVE-2021-34434 CVE-2021-41039 CVE-2023-0809 CVE-2023-28366 CVE-2023-3592 Upstream summary: It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7984-1 Related CVEs: CVE-2024-47516 CVE-2024-4982 CVE-2024-4981 CVE-2024-47515 Upstream summary: Thomas Chauchefoin discovered that Pagure incorrectly handled symbolic links in Git repositories. A remote attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6598-1 Related CVEs: CVE-2023-48795 CVE-2022-24302 Upstream summary: Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was […]