ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 27 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6434-1 Related CVEs: CVE-2023-41915 Upstream summary: Francois Diakhate discovered that PMIx did not properly handle race conditions in the pmix library, which could lead to unwanted privilege escalation. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7147-1 Related CVEs: CVE-2016-6802 CVE-2023-34478 CVE-2023-46749 CVE-2023-46750 CVE-2016-4437 Upstream summary: It was discovered that Apache Shiro incorrectly handled path traversal when used with other web frameworks or path rewriting. An […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6011-1 Related CVEs: CVE-2021-31684 CVE-2023-1370 Upstream summary: It was discovered that Json-smart incorrectly handled memory when processing input containing unclosed quotes. A remote attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 26 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6279-1 Related CVEs: https://launchpad.net/bugs/2030275 CVE-2023-38408 CVE-2019-6111 CVE-2018-20685 CVE-2019-6109 CVE-2016-10708 CVE-2018-15473 CVE-2016-10009  +12 more Upstream summary: It was discovered that OpenSSH has an observable discrepancy leading to an information leak in […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6280-1 Related CVEs: CVE-2023-36810 CVE-2022-24859 Upstream summary: It was discovered that PyPDF2 incorrectly handled PDF files with certain markers. If a user or automated system were tricked into processing a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7297-1 Related CVEs: CVE-2023-48795 CVE-2023-51713 CVE-2024-48651 Upstream summary: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8091-1 Related CVEs: https://launchpad.net/bugs/2143850 CVE-2024-28085 CVE-2021-3995 CVE-2021-3996 Upstream summary: It was discovered that the util-linux su utility did not drop capabilities when being used with the –pty option. While not […]

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6684-1 Related CVEs: CVE-2023-50495 CVE-2020-19189 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 CVE-2017-16879  +12 more Upstream summary: It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation […]

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7222-1 Related CVEs: CVE-2023-50229 CVE-2023-50230 CVE-2022-3563 CVE-2023-27349 CVE-2023-45866 https://launchpad.net/bugs/1977968 CVE-2022-0204 CVE-2021-3658  +5 more Upstream summary: Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user […]