Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6755-1 Related CVEs: CVE-2023-7207 CVE-2021-38185 Upstream summary: Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted […]

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7474-1 Related CVEs: CVE-2023-28840 CVE-2023-28841 CVE-2023-28842 CVE-2024-23651 CVE-2024-23652 CVE-2024-36621 CVE-2024-36623 CVE-2024-41110  +4 more Upstream summary: Cory Snider discovered that Docker incorrectly handled networking packet encapsulation. An attacker could use this […]

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7258-1 Related CVEs: CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 CVE-2024-43411 CVE-2018-9861 CVE-2020-9281 CVE-2021-32808  +3 more Upstream summary: Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6408-1 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-1 Related CVEs: CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6780-1 Related CVEs: CVE-2024-3651 Upstream summary: Guido Vranken discovered that idna did not properly manage certain inputs, which could lead to significant resource consumption. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6474-1 Related CVEs: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483  +6 more Upstream summary: It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6179-1 Related CVEs: CVE-2023-1436 CVE-2022-40149 CVE-2022-40150 CVE-2022-45685 CVE-2022-45693 Upstream summary: It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6761-1 Related CVEs: CVE-2024-30187 Upstream summary: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to […]