Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5833-1 Related CVEs: CVE-2022-40899 Upstream summary: Sebastian Chnelik discovered that python-future incorrectly handled certain HTTP header field. An attacker could possibly use this issue to cause a denial of service. […]

🟠 High   ⏱ 15–60 min  Last verified: 19 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5483-1 Related CVEs: CVE-2018-12648 CVE-2021-36045 CVE-2021-36046 CVE-2021-36047 CVE-2021-36048 CVE-2021-36050 CVE-2021-36051 CVE-2021-36052  +12 more Upstream summary: It was discovered that Exempi incorrectly handled certain media files. If a user or automated […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7165-1 Related CVEs: CVE-2022-22965 Upstream summary: It was discovered that the Spring Framework incorrectly handled web requests via data binding. An attacker could possibly use this issue to achieve remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5731-1 Related CVEs: CVE-2022-41973 CVE-2022-41974 Upstream summary: It was discovered that multipath-tools incorrectly handled symlinks. A local attacker could possibly use this issue, in combination with other issues, to escalate […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6379-1 Related CVEs: CVE-2021-3618 Upstream summary: It was discovered that vsftpd was vulnerable to the ALPACA TLS protocol content confusion attack. A remote attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5561-1 Related CVEs: CVE-2021-45085 CVE-2021-45086 CVE-2021-45087 CVE-2022-29536 Upstream summary: It was discovered that GNOME Web incorrectly filtered certain strings. A remote attacker could use this issue to perform cross-site scripting […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5304-1 Related CVEs: CVE-2021-4115 CVE-2021-4034 CVE-2021-3560 Upstream summary: Kevin Backhouse discovered that PolicyKit incorrectly handled file descriptors. A local attacker could possibly use this issue to cause PolicyKit to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5784-1 Related CVEs: CVE-2021-3700 Upstream summary: It was discovered that usbredir incorrectly handled memory when serializing large amounts of data in the case of a slow or blocked destination. An […]

🟠 High   ⏱ 15–60 min  Last verified: 5 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5219-1 Related CVEs: CVE-2021-4204 https://launchpad.net/bugs/1956585 CVE-2021-20321 CVE-2021-3760 CVE-2021-4002 CVE-2021-41864 CVE-2021-43056 CVE-2021-43267  +12 more Upstream summary: It was discovered that the eBPF implementation in the Linux kernel did not properly validate […]