canonical ubuntu linux 19.04 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored. This vulnerability affects Fi...

Mozilla Firefox Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Debian Debian Linux 10.0

6.1

CVSSv3

The documentation XML-RPC server in Python up to and including 2.7.16, 3.x up to and including 3.6.9, and 3.7.x up to and including 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_ser...

Python Python Debian Debian Linux 9.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04

9.8

CVSSv3

The HTTP/2 implementation in HAProxy prior to 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.

Haproxy Haproxy Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10 Debian Debian Linux 10.0

9.8

CVSSv3

sysstat up to and including 12.2.0 has a double free in check_file_actlst in sa_common.c.

Sysstat Project Sysstat Debian Debian Linux 10.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 16.04

5.5

CVSSv3

An issue exists in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case.

Xpdfreader Xpdf 4.01.01 Debian Debian Linux 9.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 16.04

4.6

CVSSv3

In the Linux kernel prior to 5.3.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098.

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Opensuse Leap 15.1

6.5

CVSSv3

In GIFLIB prior to 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero.

Giflib Project Giflib Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Debian Debian Linux 10.0

5.5

CVSSv3

docker-credential-helpers prior to 0.6.3 has a double free in the List functions.

Docker Credential Helpers Fedoraproject Fedora 32 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 16.04

7.5

CVSSv3

Sigil prior to 0.9.16 is vulnerable to a directory traversal, allowing malicious users to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.

Sigil-ebook Sigil Flightcrew Project Flightcrew Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04

6.5

CVSSv3

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows malicious users to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.

Ffmpeg Ffmpeg 3.2 Ffmpeg Ffmpeg 4.1 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 19.04

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook