ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7839-1 Related CVEs: CVE-2024-45337 Upstream summary: Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier discovered that Go Cryptography incorrectly handled public keys during SSH operations. An attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8242-1 Related CVEs: CVE-2023-28447 Upstream summary: Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not properly escape JavaScript code. An attacker could possibly use this issue to conduct a […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6935-1 Related CVEs: CVE-2023-40577 Upstream summary: It was discovered that prometheus-alertmanager didn't properly sanitize input it received through an API endpoint. An attacker with permission to send requests to this […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7839-1 Related CVEs: CVE-2024-45337 Upstream summary: Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier discovered that Go Cryptography incorrectly handled public keys during SSH operations. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 22 May 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6112-1 Related CVEs: CVE-2023-31484 CVE-2020-16156 CVE-2020-10543 CVE-2020-10878 CVE-2020-12723 CVE-2018-18311 CVE-2018-18312 CVE-2018-18313  +12 more Upstream summary: It was discovered that Perl was not properly verifying TLS certificates when using CPAN together […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6476-1 Related CVEs: CVE-2023-46852 CVE-2023-46853 Upstream summary: It was discovered that Memcached incorrectly handled certain multiget requests in proxy mode. A remote attacker could use this issue to cause Memcached […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8109-1 Related CVEs: CVE-2023-27635 Upstream summary: Jakub Wilk discovered that debmany in Debian Goodies incorrectly handled certain deb files. An attacker could possibly use this issue to execute arbitrary shell […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8272-1 Related CVEs: CVE-2023-28447 CVE-2021-21408 CVE-2021-26119 CVE-2021-26120 CVE-2021-29454 Upstream summary: Takuya Aramaki discovered that Smarty did not properly escape JavaScript code. An attacker could possibly use this issue to conduct […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6942-1 Related CVEs: CVE-2023-52159 Upstream summary: It was discovered that Gross incorrectly handled memory when composing log entries. An attacker could possibly use this issue to cause Gross to crash, […]

🟠 High   ⏱ 15–60 min  Last verified: 18 May 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6345-1 Related CVEs: CVE-2023-32627 CVE-2021-33844 CVE-2019-13590 CVE-2021-23159 CVE-2021-23172 CVE-2021-23210 CVE-2021-3643 CVE-2021-40426  +2 more Upstream summary: It was discovered that SoX incorrectly handled certain inputs. If a user or an automated […]