ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7290-1 Related CVEs: CVE-2024-41128 CVE-2024-47887 CVE-2024-47888 CVE-2024-47889 Upstream summary: It was discovered that Rails did not correctly handle parsing block formats in email service layers. An attacker could possibly use […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7050-1 Related CVEs: CVE-2021-43177 CVE-2024-8796 Upstream summary: Benoit Côté-Jodoin and Michael Nipper discovered that Devise-Two-Factor incorrectly handled one-time password validation. An attacker could possibly use this issue to intercept and […]

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6939-1 Related CVEs: CVE-2024-39929 CVE-2021-38371 CVE-2023-51766 CVE-2023-42117 CVE-2023-42119 CVE-2023-42114 CVE-2023-42115 CVE-2023-42116  +12 more Upstream summary: Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5897-1 Related CVEs: CVE-2023-21835 CVE-2023-21843 CVE-2022-21619 CVE-2022-21624 CVE-2022-21626 CVE-2022-21628 CVE-2022-39399 CVE-2022-21618 Upstream summary: Juraj Somorovsky, Marcel Maehren, Nurullah Erinola, and Robert Merget discovered that the DTLS implementation in the JSSE […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6559-1 Related CVEs: CVE-2019-0201 CVE-2023-44981 CVE-2016-5017 CVE-2017-5637 CVE-2018-8012 Upstream summary: It was discovered that ZooKeeper incorrectly handled authorization for the getACL() command. A remote attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6734-1 Related CVEs: CVE-2024-1441 CVE-2024-2494 CVE-2024-2496 CVE-2022-0897 CVE-2023-2700 Upstream summary: Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause libvirt […]

🟠 High   ⏱ 15–60 min  Last verified: 20 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8076-1 Related CVEs: CVE-2024-39936 CVE-2023-51714 CVE-2022-25255 CVE-2020-13962 CVE-2020-17507 CVE-2023-24607 CVE-2023-32762 CVE-2023-33285  +8 more Upstream summary: It was discovered that Qt did not correctly handle OpenSSL's error queue. An attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6715-1 Related CVEs: CVE-2024-1013 Upstream summary: It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash. Table […]