ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 18 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7249-1 Related CVEs: CVE-2024-5197 CVE-2023-5217 CVE-2020-0034 CVE-2017-13194 CVE-2019-9232 CVE-2019-9433 Upstream summary: Xiantong Hou discovered that libvpx would overflow when attempting to allocate memory for very large images. If an application […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8191-1 Related CVEs: CVE-2024-47554 CVE-2021-29425 Upstream summary: It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 18 July 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6021-1 Related CVEs: CVE-2023-1528 CVE-2023-1530 CVE-2023-1531 CVE-2023-1533 CVE-2023-1811 CVE-2023-1815 CVE-2023-1818 CVE-2023-1529  +12 more Upstream summary: It was discovered that Chromium did not properly manage memory in several components. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 July 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6210-1 Related CVEs: CVE-2023-34246 Upstream summary: It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7677-1 Related CVEs: CVE-2024-6174 CVE-2024-11584 Upstream summary: Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to send hotplug-hook commands. […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7192-1 Related CVEs: CVE-2024-43700 Upstream summary: It was discovered that xfpt did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted file, […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6800-1 Related CVEs: CVE-2023-46234 Upstream summary: It was discovered that browserify-sign incorrectly handled an upper bound check in signature verification. If a user or an automated system were tricked into […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6942-1 Related CVEs: CVE-2023-52159 Upstream summary: It was discovered that Gross incorrectly handled memory when composing log entries. An attacker could possibly use this issue to cause Gross to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7616-1 Related CVEs: CVE-2023-6378 CVE-2021-42550 Upstream summary: It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this […]