ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4700-1 Related CVEs: CVE-2019-12761 Upstream summary: Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this with a crafted .menu file to execute arbitrary code. […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4842-1 Related CVEs: CVE-2018-12520 Upstream summary: It was discovered that ntopng did not properly seed its random number generator, leading to predictable session tokens. An attacker could use this vulnerability […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4857-1 Related CVEs: CVE-2019-10269 Upstream summary: It was discovered that Burrows-Wheeler Aligner (BWA) mishandled certain crafted .alt files. An attacker could use this vulnerability to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 May 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5327-1 Related CVEs: CVE-2019-7282 Upstream summary: Hiroyuki Yamamori discovered that rsh incorrectly handled certain filenames. If a user or automated system were tricked into connecting to a malicious rsh server, […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4868-1 Related CVEs: CVE-2019-17362 Upstream summary: It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4001-1 Related CVEs: CVE-2019-9893 Upstream summary: Jann Horn discovered that libseccomp did not correctly generate 64-bit syscall argument comparisons with arithmetic operators (LT, GT, LE, GE). An attacker could use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4741-1 Related CVEs: CVE-2017-15095 CVE-2017-7525 CVE-2019-10172 Upstream summary: It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3607-1 Related CVEs: CVE-2018-8885 Upstream summary: It was discovered that Screen Resolution Extra was using PolicyKit in an unsafe manner. A local attacker could potentially exploit this issue to bypass […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4160-1 Related CVEs: CVE-2018-19518 Upstream summary: It was discovered that UW IMAP incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4243-1 Related CVEs: CVE-2016-2090 CVE-2019-20367 Upstream summary: It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only […]