ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7469-1 Related CVEs: CVE-2023-44487 Upstream summary: It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 6 June 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6514-1 Related CVEs: CVE-2023-5366 CVE-2023-1668 CVE-2022-4337 CVE-2022-4338 CVE-2022-32166 CVE-2020-35498 CVE-2015-8011 CVE-2020-27827  +3 more Upstream summary: It was discovered that Open vSwitch did not correctly handle OpenFlow rules for ICMPv6 Neighbour […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7224-1 Related CVEs: CVE-2019-18928 CVE-2021-33582 CVE-2024-34055 Upstream summary: It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 June 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6910-1 Related CVEs: CVE-2015-7559 CVE-2018-11775 CVE-2020-13920 CVE-2021-26117 CVE-2022-41678 CVE-2023-46604 Upstream summary: Chess Hazlett discovered that Apache ActiveMQ incorrectly handled certain commands. A remote attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6543-1 Related CVEs: CVE-2023-39804 CVE-2022-48303 CVE-2021-20193 CVE-2018-20482 CVE-2019-9923 Upstream summary: It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could use this issue to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7024-1 Related CVEs: CVE-2024-45751 Upstream summary: It was discovered that tgt attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7647-1 Related CVEs: CVE-2021-3693 CVE-2021-3731 CVE-2024-23831 CVE-2021-3882 CVE-2021-3694 Upstream summary: It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 June 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7248-1 Related CVEs: CVE-2024-5564 CVE-2016-3698 Upstream summary: It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could possibly use this issue to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7438-1 Related CVEs: CVE-2023-52168 CVE-2023-52169 Upstream summary: Igor Pavlov discovered that 7-Zip had several memory-related issues. An attacker could possibly use these issues to cause 7-Zip to crash, resulting in […]