ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6780-1 Related CVEs: CVE-2024-3651 Upstream summary: Guido Vranken discovered that idna did not properly manage certain inputs, which could lead to significant resource consumption. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6895-3 Related CVEs: CVE-2023-52631 CVE-2023-52637 CVE-2023-52638 CVE-2023-52642 CVE-2023-52643 CVE-2023-52645 CVE-2023-52880 CVE-2023-6270  +12 more Upstream summary: It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6470-1 Related CVEs: CVE-2023-40743 Upstream summary: It was discovered that Axis incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input […]

🟠 High   ⏱ 15–60 min  Last verified: 3 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6474-1 Related CVEs: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483  +8 more Upstream summary: It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to […]

🟠 High   ⏱ 15–60 min  Last verified: 1 March 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8178-1 Related CVEs: CVE-2024-7547 CVE-2024-7546 CVE-2024-7541 CVE-2024-7545 CVE-2024-7539 CVE-2024-7544 CVE-2024-7540 CVE-2024-7542  +7 more Upstream summary: It was discovered that oFono incorrectly handled crafted responses from AT commands. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8111-1 Related CVEs: https://bugs.launchpad.net/glance/+bug/2138602 CVE-2024-32498 CVE-2022-47951 Upstream summary: It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or importing images […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6398-1 Related CVEs: CVE-2022-26505 CVE-2023-33476 Upstream summary: It was discovered that ReadyMedia was vulnerable to DNS rebinding attacks. A remote attacker could possibly use this issue to trick the local […]

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7258-1 Related CVEs: CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 CVE-2024-43411 CVE-2018-9861 CVE-2020-9281 CVE-2021-32808  +3 more Upstream summary: Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7474-1 Related CVEs: CVE-2023-28840 CVE-2023-28841 CVE-2023-28842 CVE-2024-23651 CVE-2024-23652 CVE-2024-36621 CVE-2024-36623 CVE-2024-41110  +4 more Upstream summary: Cory Snider discovered that Docker incorrectly handled networking packet encapsulation. An attacker could use this […]

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6580-1 Related CVEs: CVE-2023-4255 CVE-2022-38223 CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424  +12 more Upstream summary: It was discovered that w3m incorrectly handled certain HTML files. An attacker could possibly use […]