Ubuntu 24.04

🟡 Medium   ⏱ 10–30 min  Last verified: 26 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7913-1 Related CVEs: CVE-2022-34300 CVE-2018-16981 CVE-2021-46143 Upstream summary: It was discovered that the stb library, included in MAME, had a heap-based buffer overflow. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7231-1 Related CVEs: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 CVE-2023-4256  +1 more Upstream summary: It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7576-1 Related CVEs: CVE-2022-32200 Upstream summary: It was discovered that dwarfutils did not correctly certain memory operations, which could lead to a buffer overflow. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7677-1 Related CVEs: CVE-2024-6174 CVE-2024-11584 Upstream summary: Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to send hotplug-hook commands. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7398-1 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6899-1 Related CVEs: CVE-2024-6655 Upstream summary: It was discovered that GTK would attempt to load modules from the current directory, contrary to expectations. If users started GTK applications from shared […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7054-1 Related CVEs: CVE-2021-4217 Upstream summary: It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7568-1 Related CVEs: CVE-2024-47081 CVE-2023-32681 Upstream summary: Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6904-1 Related CVEs: CVE-2024-5629 Upstream summary: It was discovered that PyMongo incorrectly handled certain BSON. An attacker could possibly use this issue to read sensitive information or cause a crash. […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 June 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7165-1 Related CVEs: CVE-2022-22965 Upstream summary: It was discovered that the Spring Framework incorrectly handled web requests via data binding. An attacker could possibly use this issue to achieve remote […]