canonical ubuntu linux 20.10 vulnerabilities and exploits

(subscribe to this query)

It exists that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.

Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04 Canonical Ubuntu Linux 21.10

It exists that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users.

Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04 Canonical Ubuntu Linux 21.10

The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an malicious user to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed ...

Linux Linux Kernel Linux Linux Kernel 5.13 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04

1 Github repository

The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4...

Linux Linux Kernel Linux Linux Kernel 5.13 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04

4 Github repositories1 Article

It exists that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.

Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04 Canonical Ubuntu Linux 21.10 Oracle Openjdk 17

GNOME gdk-pixbuf (aka GdkPixbuf) prior to 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign the value 11 to c. The next execution in the loop will assign self->cod...

Gnome Gdk-pixbuf Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Fedoraproject Fedora 33 Fedoraproject Fedora 34

OpenVPN 2.5.1 and previous versions versions allows a remote malicious users to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Openvpn Openvpn Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04 Debian Debian Linux 9.0

A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote malicious user to cause a denial of service condition on an affected device. The vulnerability is due ...

Clamav Clamav Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with...

Linux Linux Kernel Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Netapp Cloud Backup -Netapp Hci Management Node -Netapp Solidfire -Netapp Steelstore Cloud Integrated Storage -Netapp A700s Firmware -Netapp 8300 Firmware -

3 Github repositories1 Article

« PREV 1 2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook