ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7347-1 Related CVEs: CVE-2024-38439 CVE-2024-38440 CVE-2024-38441 CVE-2022-22995 CVE-2023-42464 CVE-2021-31439 CVE-2022-0194 CVE-2022-23121  +6 more Upstream summary: It was discovered that Netatalk did not properly manage memory under certain circumstances. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6826-1 Related CVEs: CVE-2023-41081 Upstream summary: Karl von Randow discovered that mod_jk was vulnerable to an authentication bypass. If the configuration did not provide explicit mounts for all possible proxied […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6559-1 Related CVEs: CVE-2019-0201 CVE-2023-44981 Upstream summary: It was discovered that ZooKeeper incorrectly handled authorization for the getACL() command. A remote attacker could possibly use this issue to obtain sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7174-1 Related CVEs: CVE-2024-47606 Upstream summary: Antonio Morales discovered that GStreamer incorrectly handled allocating memory for certain buffers. An attacker could use this issue to cause GStreamer to crash, resulting […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6687-1 Related CVEs: CVE-2012-6655 CVE-2023-3297 CVE-2021-3939 CVE-2018-14036 CVE-2020-16126 CVE-2020-16127 Upstream summary: It was discovered that AccountsService called a helper incorrectly when performing password change operations. A local attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7984-1 Related CVEs: CVE-2024-47516 CVE-2024-4982 CVE-2024-4981 CVE-2024-47515 Upstream summary: Thomas Chauchefoin discovered that Pagure incorrectly handled symbolic links in Git repositories. A remote attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6799-1 Related CVEs: CVE-2024-34069 CVE-2023-23934 CVE-2023-25577 CVE-2019-14806 CVE-2020-28724 CVE-2016-10516 Upstream summary: It was discovered that the debugger in Werkzeug was not restricted to trusted hosts. A remote attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6643-1 Related CVEs: CVE-2023-42282 Upstream summary: Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6945-1 Related CVEs: CVE-2024-5290 https://launchpad.net/bugs/2067613 CVE-2021-27803 CVE-2020-12695 CVE-2021-0326 CVE-2019-16275 CVE-2019-13377 CVE-2019-11555  +6 more Upstream summary: Rory McNamara discovered that wpa_supplicant could be made to load arbitrary shared objects by unprivileged […]