ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8050-1 Related CVEs: CVE-2024-50305 CVE-2023-44487 Upstream summary: Masakazu Kitajo discovered that Apache Traffic Server did not properly handle the Valid Host header field. An attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7248-1 Related CVEs: CVE-2024-5564 Upstream summary: It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could possibly use this issue to cause NetworkManager […]

🟠 High   ⏱ 15–60 min  Last verified: 17 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6474-1 Related CVEs: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483  +6 more Upstream summary: It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6179-1 Related CVEs: CVE-2023-1436 CVE-2022-40149 CVE-2022-40150 CVE-2022-45685 CVE-2022-45693 Upstream summary: It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6761-1 Related CVEs: CVE-2024-30187 Upstream summary: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6670-1 Related CVEs: CVE-2022-24775 CVE-2023-29197 Upstream summary: It was discovered that php-guzzlehttp-psr7 incorrectly parsed HTTP headers. A remote attacker could possibly use these issues to perform an HTTP header injection […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 February 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7317-1 Related CVEs: CVE-2022-23303 CVE-2022-23304 CVE-2022-37660 CVE-2024-5290 https://launchpad.net/bugs/2067613 CVE-2021-27803 CVE-2020-12695 CVE-2021-0326 Upstream summary: George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7700-1 Related CVEs: CVE-2023-4039 Upstream summary: It was discovered that the -fstack-protector hardening feature in GCC for AArch64 did not properly protect dynamically-sized local variables such as those created using […]

🟠 High   ⏱ 15–60 min  Last verified: 14 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7231-1 Related CVEs: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 CVE-2023-4256  +12 more Upstream summary: It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 February 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7209-1 Related CVEs: CVE-2023-44441 Upstream summary: Jacob Boerema discovered that the GIMP DDS Plugin incorrectly processed DDS files due to a memory issue. An attacker could exploit this through a […]