canonical ubuntu linux 19.10 vulnerabilities and exploits

(subscribe to this query)

It exists that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DIRS to append a path to a directory controlled by the calling snap. A malicious snap could...

Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04

A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel up to and including 5.3.9 allows malicious users to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10

cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass inten...

Canonical Snapd Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04

A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel prior to 5.3.8 allows malicious users to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, a...

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel prior to 5.3.11 allows malicious users to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6...

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel prior to 5.3.9 allows malicious users to cause a denial of service (memory consumption) by triggering copy_form_user() failures, aka CID-e0b0cb938864.

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel prior to 5.4.2, when GCC 9 is used, allows context-dependent malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact because of incorrect fpu_fpregs_ow...

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

FreeTDS up to and including 1.1.11 has a Buffer Overflow.

Freetds Freetds Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.

Mozilla Thunderbird Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. Th...

Mozilla Thunderbird Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook