ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 8 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7878-1 Related CVEs: CVE-2025-64503 CVE-2025-57812 CVE-2025-64524 CVE-2024-47076 CVE-2024-47176 CVE-2023-24805 Upstream summary: It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7320-1 Related CVEs: CVE-2023-5520 CVE-2024-0321 CVE-2024-0322 Upstream summary: It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7059-1 Related CVEs: CVE-2024-47191 Upstream summary: Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6801-1 Related CVEs: CVE-2024-36039 Upstream summary: It was discovered that PyMySQL incorrectly escaped untrusted JSON input. An attacker could possibly use this issue to perform SQL injection attacks. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8128-1 Related CVEs: CVE-2018-25099 CVE-2025-40914 CVE-2025-40912 Upstream summary: It was discovered that CryptX did not verify authentication tags while performing GCM and ChaCha20-Poly1305 decryption. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7878-1 Related CVEs: CVE-2025-64503 CVE-2025-57812 CVE-2025-64524 CVE-2024-47076 CVE-2024-47176 CVE-2023-24805 Upstream summary: It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6676-1 Related CVEs: CVE-2024-25629 CVE-2023-31130 CVE-2023-32067 CVE-2022-4904 Upstream summary: Vojtěch Vobr discovered that c-ares incorrectly handled user input from local configuration files. An attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6676-1 Related CVEs: CVE-2024-25629 CVE-2023-31130 CVE-2023-32067 CVE-2022-4904 CVE-2021-3672 Upstream summary: Vojtěch Vobr discovered that c-ares incorrectly handled user input from local configuration files. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7225-1 Related CVEs: CVE-2022-0137 CVE-2022-0534 CVE-2022-24191 CVE-2022-27114 CVE-2022-28085 CVE-2022-34033 CVE-2022-34035 CVE-2024-45508  +1 more Upstream summary: It was discovered that HTMLDOC incorrectly handled memory in the image_set_mask, git_read_lzw, write_header and write_node […]