Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5953-1 Related CVEs: CVE-2015-5607 CVE-2022-21699 Upstream summary: It was discovered that IPython incorrectly processed REST API POST requests. An attacker could possibly use this issue to launch a cross-site request […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5249-1 Related CVEs: CVE-2022-23220 Upstream summary: It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative privileges […]

🟠 High   ⏱ 15–60 min  Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5711-1 Related CVEs: CVE-2022-40284 CVE-2021-46790 CVE-2022-30783 CVE-2022-30784 CVE-2022-30785 CVE-2022-30786 CVE-2022-30787 CVE-2022-30788  +2 more Upstream summary: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5961-1 Related CVEs: CVE-2018-10753 CVE-2018-10771 CVE-2019-1010069 CVE-2021-32434 CVE-2021-32435 CVE-2021-32436 Upstream summary: It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8110-1 Related CVEs: CVE-2021-4456 Upstream summary: Dave Rolsky discovered that Net-CIDR did not properly sanitize IP addresses. An attacker could possibly use this to bypass IP-based restrictions. Table of contents […]

🟠 High   ⏱ 15–60 min  Last verified: 11 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5608-1 Related CVEs: CVE-2022-2132 CVE-2021-3839 CVE-2022-0669 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378  +5 more Upstream summary: It was discovered that DPDK incorrectly handled certain Vhost headers. A remote attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5009-1 Related CVEs: CVE-2020-29129 CVE-2020-29130 CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 CVE-2020-10756 Upstream summary: Qiuhao Li discovered that libslirp incorrectly handled certain header data lengths. An attacker inside a guest could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5870-1 Related CVEs: CVE-2022-25147 Upstream summary: Ronald Crane discovered that APR-util did not properly handled memory when encoding or decoding certain input data. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7368-1 Related CVEs: CVE-2017-18640 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8077-1 Related CVEs: CVE-2020-6816 CVE-2021-23980 CVE-2018-7753 CVE-2020-6802 CVE-2020-6817 Upstream summary: It was discovered that Bleach did not properly sanitize URI attributes containing character entities. An attacker could possibly use this […]