ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6402-1 Related CVEs: CVE-2023-36328 Upstream summary: It was discovered that LibTomMath incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code and cause a denial […]

🟠 High   ⏱ 15–60 min  Last verified: 26 January 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6110-1 Related CVEs: CVE-2021-28275 CVE-2021-28277 CVE-2021-3496 https://launchpad.net/bugs/2020068 CVE-2021-34055 CVE-2022-41751 CVE-2019-1010301 CVE-2019-1010302  +6 more Upstream summary: It was discovered that Jhead did not properly handle certain crafted Canon images when processing […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6558-1 Related CVEs: CVE-2018-13440 CVE-2018-17095 CVE-2019-13147 CVE-2022-24599 Upstream summary: It was discovered that audiofile could be made to dereference invalid memory. If a user or an automated system were tricked […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6169-1 Related CVEs: CVE-2022-2469 Upstream summary: It was discovered that GNU SASL's GSSAPI server could make an out-of-bounds reads if given specially crafted GSS-API authentication data. A remote attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5309-1 Related CVEs: CVE-2022-0135 CVE-2022-0175 Upstream summary: It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this issue to cause virglrenderer to crash, resulting […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6153-1 Related CVEs: CVE-2022-39286 Upstream summary: It was discovered that Jupyter Core executed untrusted files in the current working directory. An attacker could possibly use this issue to execute arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6489-1 Related CVEs: CVE-2023-1672 Upstream summary: Brian McDermott discovered that Tang incorrectly handled permissions when creating/rotating keys. A local attacker could possibly use this issue to read the keys. Table […]