ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 23 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5265-1 Related CVEs: CVE-2020-27820 CVE-2021-3640 CVE-2021-3752 CVE-2021-3772 CVE-2021-4001 CVE-2021-4090 CVE-2021-4093 CVE-2021-4202  +12 more Upstream summary: Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5967-1 Related CVEs: CVE-2020-15256 CVE-2021-23434 CVE-2021-3805 Upstream summary: It was discovered that the set() method in object-path could be corrupted as a result of prototype pollution by sending a message […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5078-1 Related CVEs: CVE-2021-41072 CVE-2021-40153 Upstream summary: Richard Weinberger discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker could use this vulnerability to write arbitrary files to the filesystem. […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5520-1 Related CVEs: CVE-2022-31081 Upstream summary: It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4970-1 Related CVEs: CVE-2021-33516 CVE-2020-12695 Upstream summary: It was discovered that GUPnP incorrectly filtered local requests. If a user were tricked into visiting a malicious website, a remote attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5849-1 Related CVEs: CVE-2022-45142 CVE-2021-44758 CVE-2022-3437 CVE-2022-42898 CVE-2022-44640 CVE-2022-41916 CVE-2018-16860 CVE-2019-12098  +3 more Upstream summary: Helmut Grohne discovered that Heimdal GSSAPI incorrectly handled logical conditions that are related to memory […]

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5493-2 Related CVEs: CVE-2022-28388 CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 CVE-2022-1158 CVE-2022-1966 CVE-2022-1972 CVE-2022-21499  +12 more Upstream summary: It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did […]

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6978-1 Related CVEs: CVE-2016-3674 CVE-2020-26217 CVE-2020-26258 CVE-2020-26259 CVE-2021-21341 CVE-2021-21342 CVE-2021-21343 CVE-2021-21344  +12 more Upstream summary: It was discovered that XStream incorrectly handled parsing of certain crafted XML documents. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5937-1 Related CVEs: CVE-2022-47021 Upstream summary: It was discovered that Opusfile was not properly validating pointer arguments in some of its functions, which could lead to a NULL pointer dereference. […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5184-1 Related CVEs: CVE-2021-3756 Upstream summary: It was discovered that libmysofa mishandled certain input. An attacker could use this vulnerability to cause a denial of service (crash). Table of contents […]