Ubuntu 20.04

🟡 Medium   ⏱ 10–30 min  Last verified: 15 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7317-1 Related CVEs: CVE-2022-23303 CVE-2022-23304 CVE-2022-37660 CVE-2024-5290 https://launchpad.net/bugs/2067613 CVE-2021-27803 CVE-2020-12695 CVE-2021-0326 Upstream summary: George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6210-1 Related CVEs: CVE-2023-34246 Upstream summary: It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6358-1 Related CVEs: CVE-2023-31606 Upstream summary: It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7316-1 Related CVEs: CVE-2020-25713 CVE-2024-57822 CVE-2024-57823 CVE-2017-18926 Upstream summary: It was discovered that Raptor incorrectly handled memory operations when processing certain input files. A remote attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 1 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7225-1 Related CVEs: CVE-2022-0137 CVE-2022-0534 CVE-2022-24191 CVE-2022-27114 CVE-2022-28085 CVE-2022-34033 CVE-2022-34035 CVE-2024-45508  +12 more Upstream summary: It was discovered that HTMLDOC incorrectly handled memory in the image_set_mask, git_read_lzw, write_header and write_node […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6066-1 Related CVEs: CVE-2023-1625 Upstream summary: It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7062-1 Related CVEs: CVE-2024-36474 CVE-2024-42415 Upstream summary: It was discovered that libgsf incorrectly handled certain Compound Document Binary files. If a user or automated system were tricked into opening a […]

🟠 High   ⏱ 15–60 min  Last verified: 28 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7318-1 Related CVEs: CVE-2022-23638 CVE-2022-28959 CVE-2022-28960 CVE-2022-28961 CVE-2022-37155 CVE-2023-24258 CVE-2023-27372 CVE-2024-8517  +4 more Upstream summary: It was discovered that svg-sanitizer, vendored in SPIP, did not properly sanitize SVG/XML content. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7677-1 Related CVEs: CVE-2024-6174 CVE-2024-11584 https://launchpad.net/bugs/2020375 CVE-2023-1786 https://bugs.launchpad.net/cloud-init/+bug/2013967 CVE-2022-2084 Upstream summary: Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6407-1 Related CVEs: CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2023-3138 CVE-2021-31535 CVE-2020-14344 CVE-2020-14363 Upstream summary: Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting […]