ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 7 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4532-1 Related CVEs: CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 Upstream summary: It was discovered that Netty incorrectly handled certain HTTP headers. By sending an HTTP header with whitespace before the colon, a remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 February 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7283-1 Related CVEs: CVE-2019-0193 Upstream summary: It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4839-1 Related CVEs: CVE-2018-12020 CVE-2019-6690 Upstream summary: Marcus Brinkmann discovered that python-gnupg improperly handled certain command line parameters. A remote attacker could use this to spoof the output of python-gnupg […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4073-1 Related CVEs: CVE-2019-13615 Upstream summary: It was discovered that libEBML incorrectly handled certain media files. If a user were tricked into opening a specially crafted media file, libEBML could […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5108-1 Related CVEs: CVE-2019-17455 Upstream summary: It was discovered that Libntlm incorrectly handled specially crafted NTML requests. An attacker could possibly use this issue to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7759-1 Related CVEs: CVE-2019-6473 Upstream summary: It was discovered that Kea DHCP did not correctly handle invalid hostnames. A remote attacker could possibly use this issue to cause a denial […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3616-1 Related CVEs: CVE-2018-6594 CVE-2013-7459 Upstream summary: It was discovered that Python Crypto incorrectly generated ElGamal key parameters. A remote attacker could possibly use this issue to obtain sensitive information. […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 January 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4832-1 Related CVEs: CVE-2018-1002200 Upstream summary: It was discovered that Plexus Archiver incorrectly handled directory traversal during extraction. An attacker could possibly use this for a Zip-Slip attack. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3555-1 Related CVEs: CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 Upstream summary: It was discovered that w3m incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. (CVE-2018-6196, […]

🟠 High   ⏱ 15–60 min  Last verified: 30 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3911-2 Related CVEs: https://launchpad.net/bugs/1835596 CVE-2019-18218 CVE-2019-8904 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 CVE-2014-9620 CVE-2014-9621  +3 more Upstream summary: USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that […]