Vulnerabilities |
155 via 605 paths |
|---|---|
Dependencies |
406 |
Source |
Docker |
Target OS |
ubuntu:18.04 |
medium severity
- Vulnerable module: imagemagick
- Introduced through: imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15, imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6.q16@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-arch-config@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3-extra@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-dev@8:6.9.7.4+dfsg-16ubuntu6.15
NVD Description
Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
Remediation
There is no fixed version for Ubuntu:18.04 imagemagick.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-34152
- https://access.redhat.com/security/cve/CVE-2023-34152
- https://bugzilla.redhat.com/show_bug.cgi?id=2210659
- https://github.com/ImageMagick/ImageMagick/issues/6339
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/
medium severity
- Vulnerable module: openssh/openssh-client
- Introduced through: openssh/openssh-client@1:7.6p1-4ubuntu0.7
- Fixed in: 1:7.6p1-4ubuntu0.7+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssh/openssh-client@1:7.6p1-4ubuntu0.7
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
Remediation
Upgrade Ubuntu:18.04 openssh to version 1:7.6p1-4ubuntu0.7+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-38408
- https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent
- https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8
- https://github.com/openbsd/src/commit/f03a4faa55c4ce0818324701dadbf91988d7351d
- https://github.com/openbsd/src/commit/f8f5a6b003981bb824329dc987d101977beda7ca
- https://news.ycombinator.com/item?id=36790196
- https://www.openssh.com/security.html
- https://www.openssh.com/txt/release-9.3p2
- https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt
- https://security.gentoo.org/glsa/202307-01
- http://www.openwall.com/lists/oss-security/2023/07/20/1
- http://www.openwall.com/lists/oss-security/2023/07/20/2
- http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/
- https://security.netapp.com/advisory/ntap-20230803-0010/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00021.html
- http://www.openwall.com/lists/oss-security/2023/09/22/9
- http://www.openwall.com/lists/oss-security/2023/09/22/11
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/
- https://support.apple.com/kb/HT213940
- https://www.vicarius.io/vsociety/posts/exploring-opensshs-agent-forwarding-rce-cve-2023-38408
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
- Fixed in: 2.7.17-1~18.04ubuntu1.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Remediation
Upgrade Ubuntu:18.04 python2.7 to version 2.7.17-1~18.04ubuntu1.13+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48565
- https://bugs.python.org/issue42051
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20231006-0007/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Remediation
There is no fixed version for Ubuntu:18.04 python3.6.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48565
- https://bugs.python.org/issue42051
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20231006-0007/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
medium severity
- Vulnerable module: libwebp/libwebp-dev
- Introduced through: libwebp/libwebp-dev@0.6.1-2ubuntu0.18.04.2, libwebp/libwebp6@0.6.1-2ubuntu0.18.04.2 and others
- Fixed in: 0.6.1-2ubuntu0.18.04.2+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › libwebp/libwebp-dev@0.6.1-2ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › libwebp/libwebp6@0.6.1-2ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › libwebp/libwebpdemux2@0.6.1-2ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › libwebp/libwebpmux3@0.6.1-2ubuntu0.18.04.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libwebp package and not the libwebp package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
Remediation
Upgrade Ubuntu:18.04 libwebp to version 0.6.1-2ubuntu0.18.04.2+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4863
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
- https://crbug.com/1479274
- https://bugzilla.suse.com/show_bug.cgi?id=1215231
- https://en.bandisoft.com/honeyview/history/
- https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863
- https://news.ycombinator.com/item?id=37478403
- https://security-tracker.debian.org/tracker/CVE-2023-4863
- https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/
- https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/
- https://www.debian.org/security/2023/dsa-5496
- https://www.debian.org/security/2023/dsa-5497
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/
- https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/
- https://security.gentoo.org/glsa/202309-05
- https://www.debian.org/security/2023/dsa-5498
- https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/
- https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/
- https://github.com/webmproject/libwebp/releases/tag/v1.3.2
- https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/
- http://www.openwall.com/lists/oss-security/2023/09/21/4
- https://blog.isosceles.com/the-webp-0day/
- http://www.openwall.com/lists/oss-security/2023/09/22/1
- http://www.openwall.com/lists/oss-security/2023/09/22/3
- http://www.openwall.com/lists/oss-security/2023/09/22/4
- http://www.openwall.com/lists/oss-security/2023/09/22/5
- http://www.openwall.com/lists/oss-security/2023/09/22/6
- http://www.openwall.com/lists/oss-security/2023/09/22/7
- http://www.openwall.com/lists/oss-security/2023/09/22/8
- http://www.openwall.com/lists/oss-security/2023/09/26/1
- http://www.openwall.com/lists/oss-security/2023/09/26/7
- http://www.openwall.com/lists/oss-security/2023/09/28/1
- http://www.openwall.com/lists/oss-security/2023/09/28/2
- http://www.openwall.com/lists/oss-security/2023/09/28/4
- https://security.netapp.com/advisory/ntap-20230929-0011/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/
- https://sethmlarson.dev/security-developer-in-residence-weekly-report-16
- https://www.bentley.com/advisories/be-2023-0001/
- https://security.gentoo.org/glsa/202401-10
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
medium severity
- Vulnerable module: postgresql-10/libpq-dev
- Introduced through: postgresql-10/libpq-dev@10.23-0ubuntu0.18.04.2 and postgresql-10/libpq5@10.23-0ubuntu0.18.04.2
- Fixed in: 10.23-0ubuntu0.18.04.2+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › postgresql-10/libpq-dev@10.23-0ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › postgresql-10/libpq5@10.23-0ubuntu0.18.04.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream postgresql-10 package and not the postgresql-10 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
Remediation
Upgrade Ubuntu:18.04 postgresql-10 to version 10.23-0ubuntu0.18.04.2+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5869
- https://access.redhat.com/errata/RHSA-2023:7545
- https://access.redhat.com/errata/RHSA-2023:7579
- https://access.redhat.com/errata/RHSA-2023:7580
- https://access.redhat.com/errata/RHSA-2023:7581
- https://access.redhat.com/errata/RHSA-2023:7616
- https://access.redhat.com/errata/RHSA-2023:7656
- https://access.redhat.com/errata/RHSA-2023:7666
- https://access.redhat.com/errata/RHSA-2023:7667
- https://access.redhat.com/errata/RHSA-2023:7694
- https://access.redhat.com/errata/RHSA-2023:7695
- https://access.redhat.com/security/cve/CVE-2023-5869
- https://bugzilla.redhat.com/show_bug.cgi?id=2247169
- https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
- https://www.postgresql.org/support/security/CVE-2023-5869/
- https://access.redhat.com/errata/RHSA-2023:7714
- https://access.redhat.com/errata/RHSA-2023:7770
- https://access.redhat.com/errata/RHSA-2023:7771
- https://access.redhat.com/errata/RHSA-2023:7772
- https://access.redhat.com/errata/RHSA-2023:7778
- https://access.redhat.com/errata/RHSA-2023:7783
- https://access.redhat.com/errata/RHSA-2023:7784
- https://access.redhat.com/errata/RHSA-2023:7785
- https://access.redhat.com/errata/RHSA-2023:7786
- https://access.redhat.com/errata/RHSA-2023:7788
- https://access.redhat.com/errata/RHSA-2023:7789
- https://access.redhat.com/errata/RHSA-2023:7790
- https://access.redhat.com/errata/RHSA-2023:7878
- https://access.redhat.com/errata/RHSA-2023:7883
- https://access.redhat.com/errata/RHSA-2023:7884
- https://access.redhat.com/errata/RHSA-2023:7885
- https://access.redhat.com/errata/RHSA-2024:0304
- https://security.netapp.com/advisory/ntap-20240119-0003/
- https://access.redhat.com/errata/RHSA-2024:0332
- https://access.redhat.com/errata/RHSA-2024:0337
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
medium severity
- Vulnerable module: gdk-pixbuf/gir1.2-gdkpixbuf-2.0
- Introduced through: gdk-pixbuf/gir1.2-gdkpixbuf-2.0@2.36.11-2, gdk-pixbuf/libgdk-pixbuf2.0-0@2.36.11-2 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › gdk-pixbuf/gir1.2-gdkpixbuf-2.0@2.36.11-2
-
Introduced through: buildpack-deps@bionic › gdk-pixbuf/libgdk-pixbuf2.0-0@2.36.11-2
-
Introduced through: buildpack-deps@bionic › gdk-pixbuf/libgdk-pixbuf2.0-common@2.36.11-2
-
Introduced through: buildpack-deps@bionic › gdk-pixbuf/libgdk-pixbuf2.0-dev@2.36.11-2
NVD Description
Note: Versions mentioned in the description apply only to the upstream gdk-pixbuf package and not the gdk-pixbuf package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.
Remediation
There is no fixed version for Ubuntu:18.04 gdk-pixbuf.
References
medium severity
- Vulnerable module: glib2.0/libglib2.0-0
- Introduced through: glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9, glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9 and others
- Fixed in: 2.56.4-0ubuntu0.18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-data@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev-bin@2.56.4-0ubuntu0.18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream glib2.0 package and not the glib2.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.
Remediation
Upgrade Ubuntu:18.04 glib2.0 to version 2.56.4-0ubuntu0.18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: libx11/libx11-6
- Introduced through: libx11/libx11-6@2:1.6.4-3ubuntu0.4, libx11/libx11-data@2:1.6.4-3ubuntu0.4 and others
- Fixed in: 2:1.6.4-3ubuntu0.4+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libx11/libx11-6@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-data@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-dev@2:1.6.4-3ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger an integer overflow and execute arbitrary code with elevated privileges.
Remediation
Upgrade Ubuntu:18.04 libx11 to version 2:1.6.4-3ubuntu0.4+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-43787
- https://access.redhat.com/security/cve/CVE-2023-43787
- https://bugzilla.redhat.com/show_bug.cgi?id=2242254
- https://security.netapp.com/advisory/ntap-20231103-0006/
- http://www.openwall.com/lists/oss-security/2024/01/24/9
- https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/
- https://access.redhat.com/errata/RHSA-2024:2145
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
medium severity
- Vulnerable module: glib2.0/libglib2.0-0
- Introduced through: glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9, glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9 and others
- Fixed in: 2.56.4-0ubuntu0.18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-data@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev-bin@2.56.4-0ubuntu0.18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream glib2.0 package and not the glib2.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.
Remediation
Upgrade Ubuntu:18.04 glib2.0 to version 2.56.4-0ubuntu0.18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: glib2.0/libglib2.0-0
- Introduced through: glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9, glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9 and others
- Fixed in: 2.56.4-0ubuntu0.18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-data@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev-bin@2.56.4-0ubuntu0.18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream glib2.0 package and not the glib2.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
Remediation
Upgrade Ubuntu:18.04 glib2.0 to version 2.56.4-0ubuntu0.18.04.9+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-29499
- https://access.redhat.com/security/cve/CVE-2023-29499
- https://bugzilla.redhat.com/show_bug.cgi?id=2211828
- https://gitlab.gnome.org/GNOME/glib/-/issues/2794
- https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html
- https://security.netapp.com/advisory/ntap-20231103-0001/
- https://security.gentoo.org/glsa/202311-18
medium severity
- Vulnerable module: libx11/libx11-6
- Introduced through: libx11/libx11-6@2:1.6.4-3ubuntu0.4, libx11/libx11-data@2:1.6.4-3ubuntu0.4 and others
- Fixed in: 2:1.6.4-3ubuntu0.4+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › libx11/libx11-6@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-data@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-dev@2:1.6.4-3ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Request, Event, or Error IDs are within the bounds of the arrays that those functions write to, using those IDs as array indexes. They trust that they were called with values provided by an Xserver adhering to the bounds specified in the X11 protocol, as all X servers provided by X.Org do. As the protocol only specifies a single byte for these values, an out-of-bounds value provided by a malicious server (or a malicious proxy-in-the-middle) can only overwrite other portions of the Display structure and not write outside the bounds of the Display structure itself, possibly causing the client to crash with this memory corruption.
Remediation
Upgrade Ubuntu:18.04 libx11 to version 2:1.6.4-3ubuntu0.4+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3138
- https://access.redhat.com/security/cve/CVE-2023-3138
- https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/304a654a0d57bf0f00d8998185f0360332cfa36c
- https://lists.x.org/archives/xorg-announce/2023-June/003406.html
- https://lists.x.org/archives/xorg-announce/2023-June/003407.html
- https://security.netapp.com/advisory/ntap-20231208-0008/
medium severity
- Vulnerable module: libxml2
- Introduced through: libxml2@2.9.4+dfsg1-6.1ubuntu1.9 and libxml2/libxml2-dev@2.9.4+dfsg1-6.1ubuntu1.9
- Fixed in: 2.9.4+dfsg1-6.1ubuntu1.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › libxml2@2.9.4+dfsg1-6.1ubuntu1.9
-
Introduced through: buildpack-deps@bionic › libxml2/libxml2-dev@2.9.4+dfsg1-6.1ubuntu1.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream libxml2 package and not the libxml2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.
Remediation
Upgrade Ubuntu:18.04 libxml2 to version 2.9.4+dfsg1-6.1ubuntu1.9+esm1 or higher.
References
medium severity
- Vulnerable module: nghttp2/libnghttp2-14
- Introduced through: nghttp2/libnghttp2-14@1.30.0-1ubuntu1
- Fixed in: 1.30.0-1ubuntu1+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › nghttp2/libnghttp2-14@1.30.0-1ubuntu1
NVD Description
Note: Versions mentioned in the description apply only to the upstream nghttp2 package and not the nghttp2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
Remediation
Upgrade Ubuntu:18.04 nghttp2 to version 1.30.0-1ubuntu1+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2019-9511
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9511
- https://seclists.org/bugtraq/2019/Sep/1
- https://seclists.org/bugtraq/2019/Aug/40
- https://kb.cert.org/vuls/id/605641/
- https://kc.mcafee.com/corporate/index?page=content&id=SB10296
- https://support.f5.com/csp/article/K02591030
- https://support.f5.com/csp/article/K02591030?utm_source=f5support&utm_medium=RSS
- https://www.synology.com/security/advisory/Synology_SA_19_33
- https://www.debian.org/security/2019/dsa-4511
- https://www.debian.org/security/2020/dsa-4669
- https://www.debian.org/security/2019/dsa-4505
- https://security-tracker.debian.org/tracker/CVE-2019-9511
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/
- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://security.netapp.com/advisory/ntap-20190823-0002/
- https://security.netapp.com/advisory/ntap-20190823-0005/
- https://access.redhat.com/errata/RHSA-2019:2692
- https://access.redhat.com/errata/RHSA-2019:2745
- https://access.redhat.com/errata/RHSA-2019:2746
- https://access.redhat.com/errata/RHSA-2019:2775
- https://access.redhat.com/errata/RHSA-2019:2799
- https://access.redhat.com/errata/RHSA-2019:2925
- https://access.redhat.com/errata/RHSA-2019:2939
- https://access.redhat.com/errata/RHSA-2019:2949
- https://access.redhat.com/errata/RHSA-2019:2955
- https://access.redhat.com/errata/RHSA-2019:2966
- https://access.redhat.com/errata/RHSA-2019:3041
- https://access.redhat.com/errata/RHSA-2019:3932
- https://access.redhat.com/errata/RHSA-2019:3933
- https://access.redhat.com/errata/RHSA-2019:3935
- https://access.redhat.com/errata/RHSA-2019:4018
- https://access.redhat.com/errata/RHSA-2019:4019
- https://access.redhat.com/errata/RHSA-2019:4020
- https://access.redhat.com/errata/RHSA-2019:4021
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html
- https://usn.ubuntu.com/4099-1/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/
- https://support.f5.com/csp/article/K02591030?utm_source=f5support&%3Butm_medium=RSS
medium severity
- Vulnerable module: nghttp2/libnghttp2-14
- Introduced through: nghttp2/libnghttp2-14@1.30.0-1ubuntu1
- Fixed in: 1.30.0-1ubuntu1+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › nghttp2/libnghttp2-14@1.30.0-1ubuntu1
NVD Description
Note: Versions mentioned in the description apply only to the upstream nghttp2 package and not the nghttp2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
Remediation
Upgrade Ubuntu:18.04 nghttp2 to version 1.30.0-1ubuntu1+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2019-9513
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9513
- https://seclists.org/bugtraq/2019/Sep/1
- https://seclists.org/bugtraq/2019/Aug/40
- https://kb.cert.org/vuls/id/605641/
- https://kc.mcafee.com/corporate/index?page=content&id=SB10296
- https://support.f5.com/csp/article/K02591030
- https://support.f5.com/csp/article/K02591030?utm_source=f5support&utm_medium=RSS
- https://www.synology.com/security/advisory/Synology_SA_19_33
- https://www.debian.org/security/2019/dsa-4511
- https://www.debian.org/security/2020/dsa-4669
- https://www.debian.org/security/2019/dsa-4505
- https://security-tracker.debian.org/tracker/CVE-2019-9513
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/
- https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://security.netapp.com/advisory/ntap-20190823-0002/
- https://security.netapp.com/advisory/ntap-20190823-0005/
- https://access.redhat.com/errata/RHSA-2019:2692
- https://access.redhat.com/errata/RHSA-2019:2745
- https://access.redhat.com/errata/RHSA-2019:2746
- https://access.redhat.com/errata/RHSA-2019:2775
- https://access.redhat.com/errata/RHSA-2019:2799
- https://access.redhat.com/errata/RHSA-2019:2925
- https://access.redhat.com/errata/RHSA-2019:2939
- https://access.redhat.com/errata/RHSA-2019:2949
- https://access.redhat.com/errata/RHSA-2019:2955
- https://access.redhat.com/errata/RHSA-2019:2966
- https://access.redhat.com/errata/RHSA-2019:3041
- https://access.redhat.com/errata/RHSA-2019:3932
- https://access.redhat.com/errata/RHSA-2019:3933
- https://access.redhat.com/errata/RHSA-2019:3935
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html
- https://usn.ubuntu.com/4099-1/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/
- https://support.f5.com/csp/article/K02591030?utm_source=f5support&%3Butm_medium=RSS
medium severity
- Vulnerable module: nghttp2/libnghttp2-14
- Introduced through: nghttp2/libnghttp2-14@1.30.0-1ubuntu1
- Fixed in: 1.30.0-1ubuntu1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › nghttp2/libnghttp2-14@1.30.0-1ubuntu1
NVD Description
Note: Versions mentioned in the description apply only to the upstream nghttp2 package and not the nghttp2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., > 32), then drop the connection.
Remediation
Upgrade Ubuntu:18.04 nghttp2 to version 1.30.0-1ubuntu1+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-11080
- https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr
- https://www.debian.org/security/2020/dsa-4696
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AAC2AA36OTRHKSVM5OV7TTVB3CZIGEFL/
- https://github.com/nghttp2/nghttp2/commit/336a98feb0d56b9ac54e12736b18785c27f75090
- https://github.com/nghttp2/nghttp2/commit/f8da73bd042f810f34d19f9eae02b46d870af394
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://lists.debian.org/debian-lts-announce/2021/10/msg00011.html
- https://www.oracle.com//security-alerts/cpujul2021.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00024.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AAC2AA36OTRHKSVM5OV7TTVB3CZIGEFL/
medium severity
new
- Vulnerable module: nghttp2/libnghttp2-14
- Introduced through: nghttp2/libnghttp2-14@1.30.0-1ubuntu1
- Fixed in: 1.30.0-1ubuntu1+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › nghttp2/libnghttp2-14@1.30.0-1ubuntu1
NVD Description
Note: Versions mentioned in the description apply only to the upstream nghttp2 package and not the nghttp2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Remediation
Upgrade Ubuntu:18.04 nghttp2 to version 1.30.0-1ubuntu1+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-44487
- https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
- https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
- https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
- https://news.ycombinator.com/item?id=37831062
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
- https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
- https://chaos.social/@icing/111210915918780532
- https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
- https://github.com/alibaba/tengine/issues/1872
- https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
- https://github.com/bcdannyboy/CVE-2023-44487
- https://github.com/caddyserver/caddy/issues/5877
- https://github.com/eclipse/jetty.project/issues/10679
- https://github.com/envoyproxy/envoy/pull/30055
- https://github.com/haproxy/haproxy/issues/2312
- https://github.com/hyperium/hyper/issues/3337
- https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
- https://github.com/nghttp2/nghttp2/pull/1961
- https://news.ycombinator.com/item?id=37830987
- https://news.ycombinator.com/item?id=37830998
- https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
- https://github.com/grpc/grpc-go/pull/6703
- https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
- https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
- https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
- https://my.f5.com/manage/s/article/K000137106
- https://bugzilla.proxmox.com/show_bug.cgi?id=4988
- https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
- https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
- https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
- https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
- https://github.com/advisories/GHSA-vx74-f528-fxqg
- https://github.com/apache/trafficserver/pull/10564
- https://github.com/dotnet/announcements/issues/277
- https://github.com/facebook/proxygen/pull/466
- https://github.com/golang/go/issues/63417
- https://github.com/h2o/h2o/pull/3291
- https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
- https://github.com/micrictor/http2-rst-stream
- https://github.com/microsoft/CBL-Mariner/pull/6381
- https://github.com/nodejs/node/pull/50121
- https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
- https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
- https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
- https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
- https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
- https://www.openwall.com/lists/oss-security/2023/10/10/6
- https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
- https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
- https://github.com/kubernetes/kubernetes/pull/121120
- https://github.com/opensearch-project/data-prepper/issues/3474
- https://github.com/oqtane/oqtane.framework/discussions/3367
- https://netty.io/news/2023/10/10/4-1-100-Final.html
- https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
- https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
- https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
- https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
- https://github.com/kazu-yamamoto/http2/issues/93
- https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
- https://news.ycombinator.com/item?id=37837043
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
- https://www.debian.org/security/2023/dsa-5521
- https://www.debian.org/security/2023/dsa-5522
- https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
- https://access.redhat.com/security/cve/cve-2023-44487
- https://blog.vespa.ai/cve-2023-44487/
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803
- https://bugzilla.suse.com/show_bug.cgi?id=1216123
- https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
- https://github.com/advisories/GHSA-qppj-fm5r-hxr3
- https://github.com/etcd-io/etcd/issues/16740
- https://github.com/junkurihara/rust-rpxy/issues/97
- https://github.com/ninenines/cowboy/issues/1615
- https://github.com/tempesta-tech/tempesta/issues/1986
- https://github.com/varnishcache/varnish-cache/issues/3996
- https://istio.io/latest/news/security/istio-security-2023-004/
- https://ubuntu.com/security/CVE-2023-44487
- https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
- https://github.com/apache/httpd-site/pull/10
- https://github.com/line/armeria/pull/5232
- https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
- https://github.com/projectcontour/contour/pull/5826
- https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
- https://github.com/Azure/AKS/issues/3947
- https://github.com/Kong/kong/discussions/11741
- https://github.com/akka/akka-http/issues/4323
- https://github.com/apache/apisix/issues/10320
- https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
- https://github.com/openresty/openresty/issues/930
- https://security.paloaltonetworks.com/CVE-2023-44487
- https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
- https://github.com/caddyserver/caddy/releases/tag/v2.7.5
- https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
- http://www.openwall.com/lists/oss-security/2023/10/13/4
- http://www.openwall.com/lists/oss-security/2023/10/13/9
- https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
- https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
- https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
- https://security.netapp.com/advisory/ntap-20231016-0001/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
- http://www.openwall.com/lists/oss-security/2023/10/18/4
- http://www.openwall.com/lists/oss-security/2023/10/18/8
- http://www.openwall.com/lists/oss-security/2023/10/19/6
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
- http://www.openwall.com/lists/oss-security/2023/10/20/8
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
- https://www.debian.org/security/2023/dsa-5540
- https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
- https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
- https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
- https://www.debian.org/security/2023/dsa-5549
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
- https://www.debian.org/security/2023/dsa-5558
- https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
- https://security.gentoo.org/glsa/202311-09
- https://www.debian.org/security/2023/dsa-5570
- https://security.netapp.com/advisory/ntap-20240426-0007/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Remediation
There is no fixed version for Ubuntu:18.04 python2.7.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-24329
- https://github.com/python/cpython/pull/99421
- https://pointernull.com/security/python-url-parse-problem.html
- https://security.netapp.com/advisory/ntap-20230324-0004/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/
- https://github.com/python/cpython/issues/102153
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/
- https://www.kb.cert.org/vuls/id/127587
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
- Fixed in: 2.7.17-1~18.04ubuntu1.13+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Remediation
Upgrade Ubuntu:18.04 python2.7 to version 2.7.17-1~18.04ubuntu1.13+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48560
- https://bugs.python.org/issue39421
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20230929-0008/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
- Fixed in: 3.6.9-1~18.04ubuntu1.13
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Remediation
Upgrade Ubuntu:18.04 python3.6 to version 3.6.9-1~18.04ubuntu1.13 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-24329
- https://github.com/python/cpython/pull/99421
- https://pointernull.com/security/python-url-parse-problem.html
- https://security.netapp.com/advisory/ntap-20230324-0004/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/
- https://github.com/python/cpython/issues/102153
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/
- https://www.kb.cert.org/vuls/id/127587
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Remediation
There is no fixed version for Ubuntu:18.04 python3.6.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48560
- https://bugs.python.org/issue39421
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20230929-0008/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZ5OOBWNYWXFTZDMCGHJVGDLDTHLWITJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO7Y2YZSDK3UYJD2KBGLXRTGNG6T326J/
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm5
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm5 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-52356
- https://access.redhat.com/security/cve/CVE-2023-52356
- https://bugzilla.redhat.com/show_bug.cgi?id=2251344
- https://gitlab.com/libtiff/libtiff/-/issues/622
- https://gitlab.com/libtiff/libtiff/-/merge_requests/546
- https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html
medium severity
- Vulnerable module: sqlite3/libsqlite3-0
- Introduced through: sqlite3/libsqlite3-0@3.22.0-1ubuntu0.7 and sqlite3/libsqlite3-dev@3.22.0-1ubuntu0.7
Detailed paths
-
Introduced through: buildpack-deps@bionic › sqlite3/libsqlite3-0@3.22.0-1ubuntu0.7
-
Introduced through: buildpack-deps@bionic › sqlite3/libsqlite3-dev@3.22.0-1ubuntu0.7
NVD Description
Note: Versions mentioned in the description apply only to the upstream sqlite3 package and not the sqlite3 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
Remediation
There is no fixed version for Ubuntu:18.04 sqlite3.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-7104
- https://sqlite.org/forum/forumpost/5bcbf4571c
- https://sqlite.org/src/info/0e4e7a05c4204b47
- https://vuldb.com/?ctiid.248999
- https://vuldb.com/?id.248999
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
- https://security.netapp.com/advisory/ntap-20240112-0008/
medium severity
- Vulnerable module: imagemagick
- Introduced through: imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15, imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6.q16@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-arch-config@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3-extra@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-dev@8:6.9.7.4+dfsg-16ubuntu6.15
NVD Description
Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.
Remediation
There is no fixed version for Ubuntu:18.04 imagemagick.
References
medium severity
- Vulnerable module: curl
- Introduced through: curl@7.58.0-2ubuntu3.24, curl/libcurl3-gnutls@7.58.0-2ubuntu3.24 and others
- Fixed in: 7.58.0-2ubuntu3.24+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › curl@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl3-gnutls@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4-openssl-dev@7.58.0-2ubuntu3.24
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains.
It could do this by exploiting a mixed case flaw in curl's function that
verifies a given cookie domain against the Public Suffix List (PSL). For
example a cookie could be set with domain=co.UK when the URL used a lower
case hostname curl.co.uk, even though co.uk is listed as a PSL domain.
Remediation
Upgrade Ubuntu:18.04 curl to version 7.58.0-2ubuntu3.24+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-46218
- https://curl.se/docs/CVE-2023-46218.html
- https://hackerone.com/reports/2212193
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/
- https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
- https://www.debian.org/security/2023/dsa-5587
- https://security.netapp.com/advisory/ntap-20240125-0007/
medium severity
- Vulnerable module: krb5/krb5-multidev
- Introduced through: krb5/krb5-multidev@1.16-2ubuntu0.4, krb5/libgssapi-krb5-2@1.16-2ubuntu0.4 and others
- Fixed in: 1.16-2ubuntu0.4+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › krb5/krb5-multidev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssapi-krb5-2@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssrpc4@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libk5crypto3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5clnt-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5srv-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkdb5-9@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-dev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5support0@1.16-2ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.
Remediation
Upgrade Ubuntu:18.04 krb5 to version 1.16-2ubuntu0.4+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-36054
- https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd
- https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final
- https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final
- https://web.mit.edu/kerberos/www/advisories/
- https://security.netapp.com/advisory/ntap-20230908-0004/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html
medium severity
- Vulnerable module: libmaxminddb/libmaxminddb-dev
- Introduced through: libmaxminddb/libmaxminddb-dev@1.3.1-1 and libmaxminddb/libmaxminddb0@1.3.1-1
Detailed paths
-
Introduced through: buildpack-deps@bionic › libmaxminddb/libmaxminddb-dev@1.3.1-1
-
Introduced through: buildpack-deps@bionic › libmaxminddb/libmaxminddb0@1.3.1-1
NVD Description
Note: Versions mentioned in the description apply only to the upstream libmaxminddb package and not the libmaxminddb package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.
Remediation
There is no fixed version for Ubuntu:18.04 libmaxminddb.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-28241
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6WUK4UCOB5FJVK36E22IRLEYGKMUWGBG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ELTOHZBPO6XVUVADP4DPZBNQCPTYOQBV/
- https://security.gentoo.org/glsa/202011-15
- https://github.com/maxmind/libmaxminddb/compare/1.4.2...1.4.3
- https://github.com/maxmind/libmaxminddb/issues/236
- https://github.com/maxmind/libmaxminddb/pull/237
- https://lists.debian.org/debian-lts-announce/2020/11/msg00019.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WUK4UCOB5FJVK36E22IRLEYGKMUWGBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELTOHZBPO6XVUVADP4DPZBNQCPTYOQBV/
medium severity
- Vulnerable module: ncurses/libncurses5
- Introduced through: ncurses/libncurses5@6.1-1ubuntu1.18.04.1, ncurses/libncurses5-dev@6.1-1ubuntu1.18.04.1 and others
- Fixed in: 6.1-1ubuntu1.18.04.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › ncurses/libncurses5@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libncurses5-dev@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libncursesw5@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libncursesw5-dev@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libtinfo-dev@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libtinfo5@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/ncurses-base@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/ncurses-bin@6.1-1ubuntu1.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream ncurses package and not the ncurses package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Remediation
Upgrade Ubuntu:18.04 ncurses to version 6.1-1ubuntu1.18.04.1+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-19189
- https://github.com/zjuchenyuan/fuzzpoc/blob/master/infotocap_poc5.md
- https://lists.debian.org/debian-lts-announce/2023/09/msg00033.html
- https://security.netapp.com/advisory/ntap-20231006-0005/
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038
- http://seclists.org/fulldisclosure/2023/Dec/10
- http://seclists.org/fulldisclosure/2023/Dec/11
- http://seclists.org/fulldisclosure/2023/Dec/9
medium severity
- Vulnerable module: openssh/openssh-client
- Introduced through: openssh/openssh-client@1:7.6p1-4ubuntu0.7
- Fixed in: 1:7.6p1-4ubuntu0.7+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssh/openssh-client@1:7.6p1-4ubuntu0.7
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
Remediation
Upgrade Ubuntu:18.04 openssh to version 1:7.6p1-4ubuntu0.7+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-51385
- https://www.openssh.com/txt/release-9.6
- https://www.openwall.com/lists/oss-security/2023/12/18/2
- https://github.com/openssh/openssh-portable/commit/7ef3787c84b6b524501211b11a26c742f829af1a
- https://www.debian.org/security/2023/dsa-5586
- https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html
- https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
- http://www.openwall.com/lists/oss-security/2023/12/26/4
- https://security.gentoo.org/glsa/202312-17
- https://security.netapp.com/advisory/ntap-20240105-0005/
- https://support.apple.com/kb/HT214084
- http://seclists.org/fulldisclosure/2024/Mar/21
medium severity
- Vulnerable module: pixman/libpixman-1-0
- Introduced through: pixman/libpixman-1-0@0.34.0-2ubuntu0.1 and pixman/libpixman-1-dev@0.34.0-2ubuntu0.1
Detailed paths
-
Introduced through: buildpack-deps@bionic › pixman/libpixman-1-0@0.34.0-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › pixman/libpixman-1-dev@0.34.0-2ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream pixman package and not the pixman package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.
Remediation
There is no fixed version for Ubuntu:18.04 pixman.
References
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
- Fixed in: 2.7.17-1~18.04ubuntu1.13+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
Remediation
Upgrade Ubuntu:18.04 python2.7 to version 2.7.17-1~18.04ubuntu1.13+esm4 or higher.
References
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
- Fixed in: 3.6.9-1~18.04ubuntu1.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
Remediation
Upgrade Ubuntu:18.04 python3.6 to version 3.6.9-1~18.04ubuntu1.13+esm1 or higher.
References
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3618
- https://access.redhat.com/security/cve/CVE-2023-3618
- https://bugzilla.redhat.com/show_bug.cgi?id=2215865
- https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
- https://security.netapp.com/advisory/ntap-20230824-0012/
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214037
- https://support.apple.com/kb/HT214038
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm4 or higher.
References
medium severity
- Vulnerable module: imagemagick
- Introduced through: imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15, imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6.q16@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-arch-config@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3-extra@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-dev@8:6.9.7.4+dfsg-16ubuntu6.15
NVD Description
Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.
Remediation
There is no fixed version for Ubuntu:18.04 imagemagick.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-25664
- https://bugzilla.redhat.com/show_bug.cgi?id=1891605
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z3J6D7POCQYQKNVRDYLTTPM5SQC3WVTR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z3J6D7POCQYQKNVRDYLTTPM5SQC3WVTR/
medium severity
- Vulnerable module: wget
- Introduced through: wget@1.19.4-1ubuntu2.2
Detailed paths
-
Introduced through: buildpack-deps@bionic › wget@1.19.4-1ubuntu2.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream wget package and not the wget package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
Remediation
There is no fixed version for Ubuntu:18.04 wget.
References
medium severity
- Vulnerable module: gnutls28/libgnutls30
- Introduced through: gnutls28/libgnutls30@3.5.18-1ubuntu1.6
- Fixed in: 3.5.18-1ubuntu1.6+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › gnutls28/libgnutls30@3.5.18-1ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream gnutls28 package and not the gnutls28 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
Remediation
Upgrade Ubuntu:18.04 gnutls28 to version 3.5.18-1ubuntu1.6+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5981
- https://access.redhat.com/security/cve/CVE-2023-5981
- https://bugzilla.redhat.com/show_bug.cgi?id=2248445
- https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23
- https://access.redhat.com/errata/RHSA-2024:0155
- http://www.openwall.com/lists/oss-security/2024/01/19/3
- https://access.redhat.com/errata/RHSA-2024:0319
- https://access.redhat.com/errata/RHSA-2024:0399
- https://access.redhat.com/errata/RHSA-2024:0451
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
- https://access.redhat.com/errata/RHSA-2024:0533
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
medium severity
- Vulnerable module: mysql-5.7/libmysqlclient-dev
- Introduced through: mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1 and mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
- Fixed in: 5.7.43-0ubuntu0.18.04.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream mysql-5.7 package and not the mysql-5.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H).
Remediation
Upgrade Ubuntu:18.04 mysql-5.7 to version 5.7.43-0ubuntu0.18.04.1+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-22053
- https://www.oracle.com/security-alerts/cpujul2023.html
- https://security.netapp.com/advisory/ntap-20230725-0005/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/
medium severity
- Vulnerable module: openssh/openssh-client
- Introduced through: openssh/openssh-client@1:7.6p1-4ubuntu0.7
- Fixed in: 1:7.6p1-4ubuntu0.7+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssh/openssh-client@1:7.6p1-4ubuntu0.7
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
Remediation
Upgrade Ubuntu:18.04 openssh to version 1:7.6p1-4ubuntu0.7+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-48795
- https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42
- https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25
- https://github.com/openssh/openssh-portable/commits/master
- https://github.com/ronf/asyncssh/tags
- https://gitlab.com/libssh/libssh-mirror/-/tags
- https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
- https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/
- https://matt.ucc.asn.au/dropbear/CHANGES
- https://www.bitvise.com/ssh-server-version-history
- https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
- https://www.openssh.com/openbsd.html
- https://www.openssh.com/txt/release-9.6
- https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/
- https://www.terrapin-attack.com
- https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0
- https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
- https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
- https://github.com/warp-tech/russh/releases/tag/v0.40.2
- https://thorntech.com/cve-2023-48795-and-sftp-gateway/
- https://twitter.com/TrueSkrillor/status/1736774389725565005
- https://www.openwall.com/lists/oss-security/2023/12/18/2
- http://www.openwall.com/lists/oss-security/2023/12/18/3
- https://github.com/paramiko/paramiko/issues/2337
- https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
- https://news.ycombinator.com/item?id=38684904
- https://news.ycombinator.com/item?id=38685286
- https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6
- https://github.com/mwiede/jsch/issues/457
- https://access.redhat.com/security/cve/cve-2023-48795
- https://bugs.gentoo.org/920280
- https://bugzilla.redhat.com/show_bug.cgi?id=2254210
- https://bugzilla.suse.com/show_bug.cgi?id=1217950
- https://github.com/advisories/GHSA-45x7-px36-x8w8
- https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
- https://github.com/erlang/otp/releases/tag/OTP-26.2.1
- https://github.com/mwiede/jsch/pull/461
- https://security-tracker.debian.org/tracker/CVE-2023-48795
- https://security-tracker.debian.org/tracker/source-package/libssh2
- https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
- https://ubuntu.com/security/CVE-2023-48795
- https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/
- https://github.com/libssh2/libssh2/pull/1291
- https://forum.netgate.com/topic/184941/terrapin-ssh-attack
- https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5
- https://github.com/rapier1/hpn-ssh/releases
- https://crates.io/crates/thrussh/versions
- https://github.com/NixOS/nixpkgs/pull/275249
- https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
- https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab
- https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
- https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
- https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
- https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
- https://github.com/proftpd/proftpd/issues/456
- https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC
- https://oryx-embedded.com/download/#changelog
- https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
- https://www.netsarang.com/en/xshell-update-history/
- https://www.paramiko.org/changelog.html
- http://www.openwall.com/lists/oss-security/2023/12/19/5
- https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
- https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/
- http://www.openwall.com/lists/oss-security/2023/12/20/3
- https://github.com/apache/mina-sshd/issues/445
- https://github.com/hierynomus/sshj/issues/916
- https://github.com/janmojzis/tinyssh/issues/81
- https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES
- https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES
- https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16
- https://security-tracker.debian.org/tracker/source-package/trilead-ssh2
- https://www.openwall.com/lists/oss-security/2023/12/20/3
- http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
- https://www.debian.org/security/2023/dsa-5586
- https://filezilla-project.org/versions.php
- https://github.com/PowerShell/Win32-OpenSSH/issues/2189
- https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
- https://github.com/cyd01/KiTTY/issues/520
- https://help.panic.com/releasenotes/transmit5/
- https://nova.app/releases/#v11.8
- https://roumenpetrov.info/secsh/#news20231220
- https://winscp.net/eng/docs/history#6.2.2
- https://www.bitvise.com/ssh-client-version-history#933
- https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508
- https://www.theregister.com/2023/12/20/terrapin_attack_ssh
- https://www.vandyke.com/products/securecrt/history.txt
- https://www.debian.org/security/2023/dsa-5588
- https://github.com/ssh-mitm/ssh-mitm/issues/165
- https://news.ycombinator.com/item?id=38732005
- https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
- https://security.gentoo.org/glsa/202312-16
- https://security.gentoo.org/glsa/202312-17
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/
- https://security.netapp.com/advisory/ntap-20240105-0004/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
- https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
- https://support.apple.com/kb/HT214084
- http://seclists.org/fulldisclosure/2024/Mar/21
- https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
- http://www.openwall.com/lists/oss-security/2024/04/17/8
- http://www.openwall.com/lists/oss-security/2024/03/06/3
- https://github.com/projectdiscovery/nuclei-templates/blob/master/javascript/cves/2023/CVE-2023-48795.yaml
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
- Fixed in: 2.7.17-1~18.04ubuntu1.13+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
Remediation
Upgrade Ubuntu:18.04 python2.7 to version 2.7.17-1~18.04ubuntu1.13+esm2 or higher.
References
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
Remediation
There is no fixed version for Ubuntu:18.04 python3.6.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-19724
- https://sourceware.org/bugzilla/show_bug.cgi?id=25362
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=805f38bc551de820bcd7b31d3c5731ae27cf853a
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=805f38bc551de820bcd7b31d3c5731ae27cf853a
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-21490
- https://sourceware.org/bugzilla/show_bug.cgi?id=25249
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=378fd436405b3051df34ac995b2e03fe1f3d1907
- https://security.netapp.com/advisory/ntap-20230929-0007/
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=378fd436405b3051df34ac995b2e03fe1f3d1907
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm3 or higher.
References
medium severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
- Fixed in: 2.30-21ubuntu1~18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
Remediation
Upgrade Ubuntu:18.04 binutils to version 2.30-21ubuntu1~18.04.9+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48063
- https://sourceware.org/bugzilla/show_bug.cgi?id=29924
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd
- https://security.netapp.com/advisory/ntap-20231006-0008/
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd
medium severity
- Vulnerable module: elfutils/libelf1
- Introduced through: elfutils/libelf1@0.170-0.4ubuntu0.1
- Fixed in: 0.170-0.4ubuntu0.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › elfutils/libelf1@0.170-0.4ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream elfutils package and not the elfutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
Remediation
Upgrade Ubuntu:18.04 elfutils to version 0.170-0.4ubuntu0.1+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-21047
- https://sourceware.org/bugzilla/show_bug.cgi?id=25068
- https://sourceware.org/git/?p=elfutils.git;a=commitdiff;h=99dc63b10b3878616b85df2dfd2e4e7103e414b8
- https://lists.debian.org/debian-lts-announce/2023/09/msg00026.html
- https://sourceware.org/git/?p=elfutils.git%3Ba=commitdiff%3Bh=99dc63b10b3878616b85df2dfd2e4e7103e414b8
medium severity
- Vulnerable module: gcc-7
- Introduced through: gcc-7@7.5.0-3ubuntu1~18.04, gcc-7/cpp-7@7.5.0-3ubuntu1~18.04 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › gcc-7@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/cpp-7@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/g++-7@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/gcc-7-base@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libasan4@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libcilkrts5@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libgcc-7-dev@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libstdc++-7-dev@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libubsan0@7.5.0-3ubuntu1~18.04
NVD Description
Note: Versions mentioned in the description apply only to the upstream gcc-7 package and not the gcc-7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
Remediation
There is no fixed version for Ubuntu:18.04 gcc-7.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-13844
- http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
- https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
medium severity
- Vulnerable module: gcc-8/gcc-8-base
- Introduced through: gcc-8/gcc-8-base@8.4.0-1ubuntu1~18.04, gcc-8/libatomic1@8.4.0-1ubuntu1~18.04 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › gcc-8/gcc-8-base@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libatomic1@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libcc1-0@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libgcc1@1:8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libgomp1@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libitm1@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/liblsan0@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libmpx2@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libquadmath0@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libstdc++6@8.4.0-1ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-8/libtsan0@8.4.0-1ubuntu1~18.04
NVD Description
Note: Versions mentioned in the description apply only to the upstream gcc-8 package and not the gcc-8 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."
Remediation
There is no fixed version for Ubuntu:18.04 gcc-8.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-13844
- http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
- https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
- https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
medium severity
- Vulnerable module: glib2.0/libglib2.0-0
- Introduced through: glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9, glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9 and others
- Fixed in: 2.56.4-0ubuntu0.18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-data@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev-bin@2.56.4-0ubuntu0.18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream glib2.0 package and not the glib2.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Remediation
Upgrade Ubuntu:18.04 glib2.0 to version 2.56.4-0ubuntu0.18.04.9+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-32665
- https://access.redhat.com/security/cve/CVE-2023-32665
- https://bugzilla.redhat.com/show_bug.cgi?id=2211827
- https://gitlab.gnome.org/GNOME/glib/-/issues/2121
- https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html
- https://security.gentoo.org/glsa/202311-18
- https://security.netapp.com/advisory/ntap-20240426-0006/
medium severity
- Vulnerable module: glib2.0/libglib2.0-0
- Introduced through: glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9, glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9 and others
- Fixed in: 2.56.4-0ubuntu0.18.04.9+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-0@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-bin@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-data@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev@2.56.4-0ubuntu0.18.04.9
-
Introduced through: buildpack-deps@bionic › glib2.0/libglib2.0-dev-bin@2.56.4-0ubuntu0.18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream glib2.0 package and not the glib2.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Remediation
Upgrade Ubuntu:18.04 glib2.0 to version 2.56.4-0ubuntu0.18.04.9+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-32611
- https://access.redhat.com/security/cve/CVE-2023-32611
- https://bugzilla.redhat.com/show_bug.cgi?id=2211829
- https://gitlab.gnome.org/GNOME/glib/-/issues/2797
- https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html
- https://security.netapp.com/advisory/ntap-20231027-0005/
- https://security.gentoo.org/glsa/202311-18
medium severity
- Vulnerable module: imagemagick
- Introduced through: imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15, imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15 and others
- Fixed in: 8:6.9.7.4+dfsg-16ubuntu6.15+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6.q16@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-arch-config@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3-extra@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-dev@8:6.9.7.4+dfsg-16ubuntu6.15
NVD Description
Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).
Remediation
Upgrade Ubuntu:18.04 imagemagick to version 8:6.9.7.4+dfsg-16ubuntu6.15+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-34151
- https://access.redhat.com/security/cve/CVE-2023-34151
- https://bugzilla.redhat.com/show_bug.cgi?id=2210657
- https://github.com/ImageMagick/ImageMagick/issues/6341
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/
- https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
medium severity
- Vulnerable module: imagemagick
- Introduced through: imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15, imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15 and others
- Fixed in: 8:6.9.7.4+dfsg-16ubuntu6.15+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6.q16@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-arch-config@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3-extra@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-dev@8:6.9.7.4+dfsg-16ubuntu6.15
NVD Description
Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
Remediation
Upgrade Ubuntu:18.04 imagemagick to version 8:6.9.7.4+dfsg-16ubuntu6.15+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5341
- https://access.redhat.com/security/cve/CVE-2023-5341
- https://bugzilla.redhat.com/show_bug.cgi?id=2241774
- https://github.com/ImageMagick/ImageMagick/commit/aa673b2e4defc7cad5bec16c4fc8324f71e531f1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LICYTADFJAFPZW3Y2MKNCJIUYODPAG4L/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAULDP3GG5KI3XITQ5XSMRSILCBZS2VK/
- https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
medium severity
- Vulnerable module: libx11/libx11-6
- Introduced through: libx11/libx11-6@2:1.6.4-3ubuntu0.4, libx11/libx11-data@2:1.6.4-3ubuntu0.4 and others
- Fixed in: 2:1.6.4-3ubuntu0.4+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libx11/libx11-6@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-data@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-dev@2:1.6.4-3ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.
Remediation
Upgrade Ubuntu:18.04 libx11 to version 2:1.6.4-3ubuntu0.4+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-43786
- https://access.redhat.com/security/cve/CVE-2023-43786
- https://bugzilla.redhat.com/show_bug.cgi?id=2242253
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/63IBRFLQVZSMOAZBZOBKFWJP26ILRAGQ/
- https://security.netapp.com/advisory/ntap-20231103-0006/
- http://www.openwall.com/lists/oss-security/2024/01/24/9
- https://access.redhat.com/errata/RHSA-2024:2145
medium severity
- Vulnerable module: libx11/libx11-6
- Introduced through: libx11/libx11-6@2:1.6.4-3ubuntu0.4, libx11/libx11-data@2:1.6.4-3ubuntu0.4 and others
- Fixed in: 2:1.6.4-3ubuntu0.4+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libx11/libx11-6@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-data@2:1.6.4-3ubuntu0.4
-
Introduced through: buildpack-deps@bionic › libx11/libx11-dev@2:1.6.4-3ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream libx11 package and not the libx11 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system.
Remediation
Upgrade Ubuntu:18.04 libx11 to version 2:1.6.4-3ubuntu0.4+esm2 or higher.
References
medium severity
- Vulnerable module: pam/libpam-modules
- Introduced through: pam/libpam-modules@1.1.8-3.6ubuntu2.18.04.6, pam/libpam-modules-bin@1.1.8-3.6ubuntu2.18.04.6 and others
- Fixed in: 1.1.8-3.6ubuntu2.18.04.6+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › pam/libpam-modules@1.1.8-3.6ubuntu2.18.04.6
-
Introduced through: buildpack-deps@bionic › pam/libpam-modules-bin@1.1.8-3.6ubuntu2.18.04.6
-
Introduced through: buildpack-deps@bionic › pam/libpam-runtime@1.1.8-3.6ubuntu2.18.04.6
-
Introduced through: buildpack-deps@bionic › pam/libpam0g@1.1.8-3.6ubuntu2.18.04.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream pam package and not the pam package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
Remediation
Upgrade Ubuntu:18.04 pam to version 1.1.8-3.6ubuntu2.18.04.6+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-22365
- http://www.openwall.com/lists/oss-security/2024/01/18/3
- https://github.com/linux-pam/linux-pam
- https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb
- https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm1 or higher.
References
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm1 or higher.
References
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-2908
- https://access.redhat.com/security/cve/CVE-2023-2908
- https://bugzilla.redhat.com/show_bug.cgi?id=2218830
- https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f
- https://gitlab.com/libtiff/libtiff/-/merge_requests/479
- https://security.netapp.com/advisory/ntap-20230731-0004/
- https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48281
- https://gitlab.com/libtiff/libtiff/-/issues/488
- https://gitlab.com/libtiff/libtiff/-/commit/d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5
- https://www.debian.org/security/2023/dsa-5333
- https://lists.debian.org/debian-lts-announce/2023/01/msg00037.html
- https://security.netapp.com/advisory/ntap-20230302-0004/
- https://security.gentoo.org/glsa/202305-31
medium severity
- Vulnerable module: xz-utils
- Introduced through: xz-utils@5.2.2-1.3ubuntu0.1, xz-utils/liblzma-dev@5.2.2-1.3ubuntu0.1 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › xz-utils@5.2.2-1.3ubuntu0.1
-
Introduced through: buildpack-deps@bionic › xz-utils/liblzma-dev@5.2.2-1.3ubuntu0.1
-
Introduced through: buildpack-deps@bionic › xz-utils/liblzma5@5.2.2-1.3ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream xz-utils package and not the xz-utils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of "endless output" and "denial of service" because decompression of the 17,486 bytes always results in 114,881,179 bytes, which is often a reasonable size increase.
Remediation
There is no fixed version for Ubuntu:18.04 xz-utils.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-22916
- https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability
- https://tukaani.org/xz/
- https://bugzilla.redhat.com/show_bug.cgi?id=2234987
- https://bugzilla.suse.com/show_bug.cgi?id=1214590
- https://github.com/tukaani-project/xz/issues/61
- https://security-tracker.debian.org/tracker/CVE-2020-22916
- http://web.archive.org/web/20230918084612/https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
- Fixed in: 2.7.17-1~18.04ubuntu1.13+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)
Remediation
Upgrade Ubuntu:18.04 python2.7 to version 2.7.17-1~18.04ubuntu1.13+esm4 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-40217
- https://mail.python.org/archives/list/security-announce@python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/
- https://www.python.org/dev/security/
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20231006-0014/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/
medium severity
- Vulnerable module: python2.7
- Introduced through: python2.7@2.7.17-1~18.04ubuntu1.11, python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › python2.7@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-minimal@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/libpython2.7-stdlib@2.7.17-1~18.04ubuntu1.11
-
Introduced through: buildpack-deps@bionic › python2.7/python2.7-minimal@2.7.17-1~18.04ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream python2.7 package and not the python2.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.
Remediation
There is no fixed version for Ubuntu:18.04 python2.7.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-27043
- http://python.com
- https://github.com/python/cpython/issues/102988
- http://python.org
- https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html
- https://security.netapp.com/advisory/ntap-20230601-0003/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
- Fixed in: 3.6.9-1~18.04ubuntu1.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created, receives data into the socket buffer, and then is closed quickly, there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)
Remediation
Upgrade Ubuntu:18.04 python3.6 to version 3.6.9-1~18.04ubuntu1.13+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-40217
- https://mail.python.org/archives/list/security-announce@python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/
- https://www.python.org/dev/security/
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
- https://security.netapp.com/advisory/ntap-20231006-0014/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
- https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/
medium severity
- Vulnerable module: python3.6
- Introduced through: python3.6@3.6.9-1~18.04ubuntu1.12, python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › python3.6@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-minimal@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/libpython3.6-stdlib@3.6.9-1~18.04ubuntu1.12
-
Introduced through: buildpack-deps@bionic › python3.6/python3.6-minimal@3.6.9-1~18.04ubuntu1.12
NVD Description
Note: Versions mentioned in the description apply only to the upstream python3.6 package and not the python3.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.
Remediation
There is no fixed version for Ubuntu:18.04 python3.6.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-27043
- http://python.com
- https://github.com/python/cpython/issues/102988
- http://python.org
- https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html
- https://security.netapp.com/advisory/ntap-20230601-0003/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/
medium severity
- Vulnerable module: mysql-5.7/libmysqlclient-dev
- Introduced through: mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1 and mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
- Fixed in: 5.7.43-0ubuntu0.18.04.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream mysql-5.7 package and not the mysql-5.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Remediation
Upgrade Ubuntu:18.04 mysql-5.7 to version 5.7.43-0ubuntu0.18.04.1+esm1 or higher.
References
medium severity
- Vulnerable module: mysql-5.7/libmysqlclient-dev
- Introduced through: mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1 and mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
- Fixed in: 5.7.43-0ubuntu0.18.04.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream mysql-5.7 package and not the mysql-5.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Remediation
Upgrade Ubuntu:18.04 mysql-5.7 to version 5.7.43-0ubuntu0.18.04.1+esm1 or higher.
References
medium severity
- Vulnerable module: mysql-5.7/libmysqlclient-dev
- Introduced through: mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1 and mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
- Fixed in: 5.7.44-0ubuntu0.18.04.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream mysql-5.7 package and not the mysql-5.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.43 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Remediation
Upgrade Ubuntu:18.04 mysql-5.7 to version 5.7.44-0ubuntu0.18.04.1+esm1 or higher.
References
medium severity
- Vulnerable module: mysql-5.7/libmysqlclient-dev
- Introduced through: mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1 and mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
- Fixed in: 5.7.44-0ubuntu0.18.04.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient-dev@5.7.42-0ubuntu0.18.04.1
-
Introduced through: buildpack-deps@bionic › mysql-5.7/libmysqlclient20@5.7.42-0ubuntu0.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream mysql-5.7 package and not the mysql-5.7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Remediation
Upgrade Ubuntu:18.04 mysql-5.7 to version 5.7.44-0ubuntu0.18.04.1+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-22084
- https://www.oracle.com/security-alerts/cpuoct2023.html
- https://security.netapp.com/advisory/ntap-20231027-0009/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OR7GNQAJZ7NMHT4HRDNROR3DS272KKET/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UCGSAQFWYIJRIYLZLHPS3MRUS4AQ5JQH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZL2AT2ZUKB6K22UTISHEZ4JKG4VZ3VO/
- https://lists.debian.org/debian-lts-announce/2024/01/msg00017.html
medium severity
- Vulnerable module: postgresql-10/libpq-dev
- Introduced through: postgresql-10/libpq-dev@10.23-0ubuntu0.18.04.2 and postgresql-10/libpq5@10.23-0ubuntu0.18.04.2
- Fixed in: 10.23-0ubuntu0.18.04.2+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › postgresql-10/libpq-dev@10.23-0ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › postgresql-10/libpq5@10.23-0ubuntu0.18.04.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream postgresql-10 package and not the postgresql-10 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.
Remediation
Upgrade Ubuntu:18.04 postgresql-10 to version 10.23-0ubuntu0.18.04.2+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5870
- https://access.redhat.com/errata/RHSA-2023:7545
- https://access.redhat.com/errata/RHSA-2023:7579
- https://access.redhat.com/errata/RHSA-2023:7580
- https://access.redhat.com/errata/RHSA-2023:7581
- https://access.redhat.com/errata/RHSA-2023:7616
- https://access.redhat.com/errata/RHSA-2023:7656
- https://access.redhat.com/errata/RHSA-2023:7666
- https://access.redhat.com/errata/RHSA-2023:7667
- https://access.redhat.com/errata/RHSA-2023:7694
- https://access.redhat.com/errata/RHSA-2023:7695
- https://access.redhat.com/security/cve/CVE-2023-5870
- https://bugzilla.redhat.com/show_bug.cgi?id=2247170
- https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
- https://www.postgresql.org/support/security/CVE-2023-5870/
- https://access.redhat.com/errata/RHSA-2023:7714
- https://access.redhat.com/errata/RHSA-2023:7770
- https://access.redhat.com/errata/RHSA-2023:7772
- https://access.redhat.com/errata/RHSA-2023:7784
- https://access.redhat.com/errata/RHSA-2023:7785
- https://access.redhat.com/errata/RHSA-2023:7883
- https://access.redhat.com/errata/RHSA-2023:7884
- https://access.redhat.com/errata/RHSA-2023:7885
- https://access.redhat.com/errata/RHSA-2024:0304
- https://security.netapp.com/advisory/ntap-20240119-0003/
- https://access.redhat.com/errata/RHSA-2024:0332
- https://access.redhat.com/errata/RHSA-2024:0337
medium severity
- Vulnerable module: postgresql-10/libpq-dev
- Introduced through: postgresql-10/libpq-dev@10.23-0ubuntu0.18.04.2 and postgresql-10/libpq5@10.23-0ubuntu0.18.04.2
- Fixed in: 10.23-0ubuntu0.18.04.2+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › postgresql-10/libpq-dev@10.23-0ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › postgresql-10/libpq5@10.23-0ubuntu0.18.04.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream postgresql-10 package and not the postgresql-10 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory.
Remediation
Upgrade Ubuntu:18.04 postgresql-10 to version 10.23-0ubuntu0.18.04.2+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5868
- https://access.redhat.com/errata/RHSA-2023:7545
- https://access.redhat.com/errata/RHSA-2023:7579
- https://access.redhat.com/errata/RHSA-2023:7580
- https://access.redhat.com/errata/RHSA-2023:7581
- https://access.redhat.com/errata/RHSA-2023:7616
- https://access.redhat.com/errata/RHSA-2023:7656
- https://access.redhat.com/errata/RHSA-2023:7666
- https://access.redhat.com/errata/RHSA-2023:7667
- https://access.redhat.com/errata/RHSA-2023:7694
- https://access.redhat.com/errata/RHSA-2023:7695
- https://access.redhat.com/security/cve/CVE-2023-5868
- https://bugzilla.redhat.com/show_bug.cgi?id=2247168
- https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/
- https://www.postgresql.org/support/security/CVE-2023-5868/
- https://access.redhat.com/errata/RHSA-2023:7714
- https://access.redhat.com/errata/RHSA-2023:7770
- https://access.redhat.com/errata/RHSA-2023:7772
- https://access.redhat.com/errata/RHSA-2023:7784
- https://access.redhat.com/errata/RHSA-2023:7785
- https://access.redhat.com/errata/RHSA-2023:7883
- https://access.redhat.com/errata/RHSA-2023:7884
- https://access.redhat.com/errata/RHSA-2023:7885
- https://access.redhat.com/errata/RHSA-2024:0304
- https://security.netapp.com/advisory/ntap-20240119-0003/
- https://access.redhat.com/errata/RHSA-2024:0332
- https://access.redhat.com/errata/RHSA-2024:0337
medium severity
- Vulnerable module: curl
- Introduced through: curl@7.58.0-2ubuntu3.24, curl/libcurl3-gnutls@7.58.0-2ubuntu3.24 and others
- Fixed in: 7.58.0-2ubuntu3.24+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › curl@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl3-gnutls@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4-openssl-dev@7.58.0-2ubuntu3.24
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.
Remediation
Upgrade Ubuntu:18.04 curl to version 7.58.0-2ubuntu3.24+esm4 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-2398
- https://curl.se/docs/CVE-2024-2398.html
- https://curl.se/docs/CVE-2024-2398.json
- https://hackerone.com/reports/2402845
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/
- http://www.openwall.com/lists/oss-security/2024/03/27/3
- https://security.netapp.com/advisory/ntap-20240503-0009/
medium severity
new
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
- Fixed in: 2.27-3ubuntu1.6+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Remediation
Upgrade Ubuntu:18.04 glibc to version 2.27-3ubuntu1.6+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-2961
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/
- http://www.openwall.com/lists/oss-security/2024/04/24/2
- http://www.openwall.com/lists/oss-security/2024/04/17/9
- http://www.openwall.com/lists/oss-security/2024/04/18/4
- https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html
medium severity
- Vulnerable module: krb5/krb5-multidev
- Introduced through: krb5/krb5-multidev@1.16-2ubuntu0.4, krb5/libgssapi-krb5-2@1.16-2ubuntu0.4 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › krb5/krb5-multidev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssapi-krb5-2@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssrpc4@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libk5crypto3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5clnt-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5srv-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkdb5-9@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-dev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5support0@1.16-2ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
Remediation
There is no fixed version for Ubuntu:18.04 krb5.
References
medium severity
- Vulnerable module: krb5/krb5-multidev
- Introduced through: krb5/krb5-multidev@1.16-2ubuntu0.4, krb5/libgssapi-krb5-2@1.16-2ubuntu0.4 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › krb5/krb5-multidev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssapi-krb5-2@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssrpc4@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libk5crypto3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5clnt-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5srv-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkdb5-9@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-dev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5support0@1.16-2ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
Remediation
There is no fixed version for Ubuntu:18.04 krb5.
References
medium severity
- Vulnerable module: krb5/krb5-multidev
- Introduced through: krb5/krb5-multidev@1.16-2ubuntu0.4, krb5/libgssapi-krb5-2@1.16-2ubuntu0.4 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › krb5/krb5-multidev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssapi-krb5-2@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssrpc4@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libk5crypto3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5clnt-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5srv-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkdb5-9@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-dev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5support0@1.16-2ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
Remediation
There is no fixed version for Ubuntu:18.04 krb5.
References
medium severity
- Vulnerable module: libgcrypt20
- Introduced through: libgcrypt20@1.8.1-4ubuntu1.3
Detailed paths
-
Introduced through: buildpack-deps@bionic › libgcrypt20@1.8.1-4ubuntu1.3
NVD Description
Note: Versions mentioned in the description apply only to the upstream libgcrypt20 package and not the libgcrypt20 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.
Remediation
There is no fixed version for Ubuntu:18.04 libgcrypt20.
References
medium severity
new
- Vulnerable module: libyaml/libyaml-0-2
- Introduced through: libyaml/libyaml-0-2@0.1.7-2ubuntu3 and libyaml/libyaml-dev@0.1.7-2ubuntu3
Detailed paths
-
Introduced through: buildpack-deps@bionic › libyaml/libyaml-0-2@0.1.7-2ubuntu3
-
Introduced through: buildpack-deps@bionic › libyaml/libyaml-dev@0.1.7-2ubuntu3
NVD Description
Note: Versions mentioned in the description apply only to the upstream libyaml package and not the libyaml package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function yaml_emitter_emit_flow_sequence_item of the file /src/libyaml/src/emitter.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Remediation
There is no fixed version for Ubuntu:18.04 libyaml.
References
medium severity
new
- Vulnerable module: nghttp2/libnghttp2-14
- Introduced through: nghttp2/libnghttp2-14@1.30.0-1ubuntu1
- Fixed in: 1.30.0-1ubuntu1+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › nghttp2/libnghttp2-14@1.30.0-1ubuntu1
NVD Description
Note: Versions mentioned in the description apply only to the upstream nghttp2 package and not the nghttp2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.
Remediation
Upgrade Ubuntu:18.04 nghttp2 to version 1.30.0-1ubuntu1+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-28182
- https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0
- https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9
- https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/
- https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html
- http://www.openwall.com/lists/oss-security/2024/04/03/16
medium severity
- Vulnerable module: tar
- Introduced through: tar@1.29b-2ubuntu0.4
- Fixed in: 1.29b-2ubuntu0.4+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › tar@1.29b-2ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream tar package and not the tar package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.
Remediation
Upgrade Ubuntu:18.04 tar to version 1.29b-2ubuntu0.4+esm1 or higher.
References
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Rejected reason: Not a Security Issue.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm2 or higher.
References
medium severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Rejected reason: Not a Security Issue.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm2 or higher.
References
low severity
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Remediation
There is no fixed version for Ubuntu:18.04 glibc.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-33574
- https://security.netapp.com/advisory/ntap-20210629-0005/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/
- https://security.gentoo.org/glsa/202107-07
- https://sourceware.org/bugzilla/show_bug.cgi?id=27896
- https://sourceware.org/bugzilla/show_bug.cgi?id=27896#c1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/
- https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/
low severity
- Vulnerable module: git
- Introduced through: git@1:2.17.1-1ubuntu0.18 and git/git-man@1:2.17.1-1ubuntu0.18
Detailed paths
-
Introduced through: buildpack-deps@bionic › git@1:2.17.1-1ubuntu0.18
-
Introduced through: buildpack-deps@bionic › git/git-man@1:2.17.1-1ubuntu0.18
NVD Description
Note: Versions mentioned in the description apply only to the upstream git package and not the git package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).
Remediation
There is no fixed version for Ubuntu:18.04 git.
References
low severity
- Vulnerable module: gcc-7
- Introduced through: gcc-7@7.5.0-3ubuntu1~18.04, gcc-7/cpp-7@7.5.0-3ubuntu1~18.04 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › gcc-7@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/cpp-7@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/g++-7@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/gcc-7-base@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libasan4@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libcilkrts5@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libgcc-7-dev@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libstdc++-7-dev@7.5.0-3ubuntu1~18.04
-
Introduced through: buildpack-deps@bionic › gcc-7/libubsan0@7.5.0-3ubuntu1~18.04
NVD Description
Note: Versions mentioned in the description apply only to the upstream gcc-7 package and not the gcc-7 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.
Remediation
There is no fixed version for Ubuntu:18.04 gcc-7.
References
low severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.
Remediation
There is no fixed version for Ubuntu:18.04 binutils.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-45078
- https://sourceware.org/bugzilla/show_bug.cgi?id=28694
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=161e87d12167b1e36193385485c1f6ce92f74f02
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQBH244M5PV6S6UMHUTCVCWFZDX7Y4M6/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UUHLDDT3HH7YEY6TX7IJRGPJUTNNVEL3/
- https://security.netapp.com/advisory/ntap-20220107-0002/
- https://security.gentoo.org/glsa/202208-30
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQBH244M5PV6S6UMHUTCVCWFZDX7Y4M6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UUHLDDT3HH7YEY6TX7IJRGPJUTNNVEL3/
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=161e87d12167b1e36193385485c1f6ce92f74f02
low severity
- Vulnerable module: systemd/libsystemd0
- Introduced through: systemd/libsystemd0@237-3ubuntu10.57 and systemd/libudev1@237-3ubuntu10.57
Detailed paths
-
Introduced through: buildpack-deps@bionic › systemd/libsystemd0@237-3ubuntu10.57
-
Introduced through: buildpack-deps@bionic › systemd/libudev1@237-3ubuntu10.57
NVD Description
Note: Versions mentioned in the description apply only to the upstream systemd package and not the systemd package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.
Remediation
There is no fixed version for Ubuntu:18.04 systemd.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-26604
- https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/
- https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340
- https://medium.com/@zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7
- https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html
- https://security.netapp.com/advisory/ntap-20230505-0009/
- http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html
- https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7
- https://www.exploit-db.com/exploits/51674
low severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.
Remediation
There is no fixed version for Ubuntu:18.04 binutils.
References
low severity
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.
Remediation
There is no fixed version for Ubuntu:18.04 glibc.
References
low severity
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.
Remediation
There is no fixed version for Ubuntu:18.04 glibc.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2009-5155
- https://support.f5.com/csp/article/K64119434
- https://support.f5.com/csp/article/K64119434?utm_source=f5support&utm_medium=RSS
- https://security-tracker.debian.org/tracker/CVE-2009-5155
- http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=5513b40999149090987a0341c018d05d3eea1272
- https://debbugs.gnu.org/cgi/bugreport.cgi?bug=22793
- https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806
- https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34238
- https://sourceware.org/bugzilla/show_bug.cgi?id=11053
- https://sourceware.org/bugzilla/show_bug.cgi?id=18986
- https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=eb04c21373e2a2885f3d52ff192b0499afe3c672
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
- https://security.netapp.com/advisory/ntap-20190315-0002/
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=eb04c21373e2a2885f3d52ff192b0499afe3c672
- https://support.f5.com/csp/article/K64119434?utm_source=f5support&%3Butm_medium=RSS
low severity
- Vulnerable module: krb5/krb5-multidev
- Introduced through: krb5/krb5-multidev@1.16-2ubuntu0.4, krb5/libgssapi-krb5-2@1.16-2ubuntu0.4 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › krb5/krb5-multidev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssapi-krb5-2@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libgssrpc4@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libk5crypto3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5clnt-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkadm5srv-mit11@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkdb5-9@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-3@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5-dev@1.16-2ubuntu0.4
-
Introduced through: buildpack-deps@bionic › krb5/libkrb5support0@1.16-2ubuntu0.4
NVD Description
Note: Versions mentioned in the description apply only to the upstream krb5 package and not the krb5 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
Remediation
There is no fixed version for Ubuntu:18.04 krb5.
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5709
- https://security-tracker.debian.org/tracker/CVE-2018-5709
- https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-5709
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: openexr/libopenexr-dev
- Introduced through: openexr/libopenexr-dev@2.2.0-11.1ubuntu1.9 and openexr/libopenexr22@2.2.0-11.1ubuntu1.9
Detailed paths
-
Introduced through: buildpack-deps@bionic › openexr/libopenexr-dev@2.2.0-11.1ubuntu1.9
-
Introduced through: buildpack-deps@bionic › openexr/libopenexr22@2.2.0-11.1ubuntu1.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream openexr package and not the openexr package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.
Remediation
There is no fixed version for Ubuntu:18.04 openexr.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-20299
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25740
- https://github.com/AcademySoftwareFoundation/openexr/commit/25e9515b06a6bc293d871622b8cafaee7af84e0f
- https://bugzilla.redhat.com/show_bug.cgi?id=1939154
- https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
low severity
- Vulnerable module: openldap/libldap-2.4-2
- Introduced through: openldap/libldap-2.4-2@2.4.45+dfsg-1ubuntu1.11 and openldap/libldap-common@2.4.45+dfsg-1ubuntu1.11
- Fixed in: 2.4.45+dfsg-1ubuntu1.11+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › openldap/libldap-2.4-2@2.4.45+dfsg-1ubuntu1.11
-
Introduced through: buildpack-deps@bionic › openldap/libldap-common@2.4.45+dfsg-1ubuntu1.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream openldap package and not the openldap package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
Remediation
Upgrade Ubuntu:18.04 openldap to version 2.4.45+dfsg-1ubuntu1.11+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-2953
- https://access.redhat.com/security/cve/CVE-2023-2953
- https://bugs.openldap.org/show_bug.cgi?id=9904
- https://security.netapp.com/advisory/ntap-20230703-0005/
- https://support.apple.com/kb/HT213843
- https://support.apple.com/kb/HT213844
- https://support.apple.com/kb/HT213845
- http://seclists.org/fulldisclosure/2023/Jul/47
- http://seclists.org/fulldisclosure/2023/Jul/48
- http://seclists.org/fulldisclosure/2023/Jul/52
low severity
- Vulnerable module: patch
- Introduced through: patch@2.7.6-2ubuntu1.1
Detailed paths
-
Introduced through: buildpack-deps@bionic › patch@2.7.6-2ubuntu1.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream patch package and not the patch package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
Remediation
There is no fixed version for Ubuntu:18.04 patch.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-6952
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6952
- https://security-tracker.debian.org/tracker/CVE-2018-6952
- https://security.gentoo.org/glsa/201904-17
- https://savannah.gnu.org/bugs/index.php?53133
- https://access.redhat.com/errata/RHSA-2019:2033
- http://www.securityfocus.com/bid/103047
low severity
- Vulnerable module: pcre3/libpcre16-3
- Introduced through: pcre3/libpcre16-3@2:8.39-9ubuntu0.1, pcre3/libpcre3@2:8.39-9ubuntu0.1 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › pcre3/libpcre16-3@2:8.39-9ubuntu0.1
-
Introduced through: buildpack-deps@bionic › pcre3/libpcre3@2:8.39-9ubuntu0.1
-
Introduced through: buildpack-deps@bionic › pcre3/libpcre3-dev@2:8.39-9ubuntu0.1
-
Introduced through: buildpack-deps@bionic › pcre3/libpcre32-3@2:8.39-9ubuntu0.1
-
Introduced through: buildpack-deps@bionic › pcre3/libpcrecpp0v5@2:8.39-9ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream pcre3 package and not the pcre3 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.
Remediation
There is no fixed version for Ubuntu:18.04 pcre3.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-11164
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11164
- https://security-tracker.debian.org/tracker/CVE-2017-11164
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- http://openwall.com/lists/oss-security/2017/07/11/3
- http://www.securityfocus.com/bid/99575
- http://www.openwall.com/lists/oss-security/2023/04/11/1
- http://www.openwall.com/lists/oss-security/2023/04/12/1
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: imagemagick
- Introduced through: imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15, imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15 and others
- Fixed in: 8:6.9.7.4+dfsg-16ubuntu6.15+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6-common@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/imagemagick-6.q16@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-arch-config@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-3-extra@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickcore-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6-headers@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-3@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-6.q16-dev@8:6.9.7.4+dfsg-16ubuntu6.15
-
Introduced through: buildpack-deps@bionic › imagemagick/libmagickwand-dev@8:6.9.7.4+dfsg-16ubuntu6.15
NVD Description
Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
Remediation
Upgrade Ubuntu:18.04 imagemagick to version 8:6.9.7.4+dfsg-16ubuntu6.15+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48541
- https://github.com/ImageMagick/ImageMagick/issues/2889
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LICYTADFJAFPZW3Y2MKNCJIUYODPAG4L/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAULDP3GG5KI3XITQ5XSMRSILCBZS2VK/
- https://lists.debian.org/debian-lts-announce/2024/03/msg00020.html
low severity
- Vulnerable module: libcroco/libcroco3
- Introduced through: libcroco/libcroco3@0.6.12-2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libcroco/libcroco3@0.6.12-2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libcroco package and not the libcroco package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
Remediation
There is no fixed version for Ubuntu:18.04 libcroco.
References
low severity
- Vulnerable module: openssh/openssh-client
- Introduced through: openssh/openssh-client@1:7.6p1-4ubuntu0.7
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssh/openssh-client@1:7.6p1-4ubuntu0.7
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
Remediation
There is no fixed version for Ubuntu:18.04 openssh.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-41617
- https://bugzilla.suse.com/show_bug.cgi?id=1190975
- https://security.netapp.com/advisory/ntap-20211014-0004/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
- https://www.openssh.com/security.html
- https://www.openssh.com/txt/release-8.8
- https://www.openwall.com/lists/oss-security/2021/09/26/1
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.starwindsoftware.com/security/sw-20220805-0001/
- https://www.tenable.com/plugins/nessus/154174
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
- https://www.debian.org/security/2023/dsa-5586
- https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
low severity
- Vulnerable module: cairo/libcairo-gobject2
- Introduced through: cairo/libcairo-gobject2@1.15.10-2ubuntu0.1, cairo/libcairo-script-interpreter2@1.15.10-2ubuntu0.1 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › cairo/libcairo-gobject2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo-script-interpreter2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo2-dev@1.15.10-2ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream cairo package and not the cairo package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).
Remediation
There is no fixed version for Ubuntu:18.04 cairo.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-18064
- https://security-tracker.debian.org/tracker/CVE-2018-18064
- https://gitlab.freedesktop.org/cairo/cairo/issues/341
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: cairo/libcairo-gobject2
- Introduced through: cairo/libcairo-gobject2@1.15.10-2ubuntu0.1, cairo/libcairo-script-interpreter2@1.15.10-2ubuntu0.1 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › cairo/libcairo-gobject2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo-script-interpreter2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo2-dev@1.15.10-2ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream cairo package and not the cairo package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.
Remediation
There is no fixed version for Ubuntu:18.04 cairo.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2019-6461
- https://security-tracker.debian.org/tracker/CVE-2019-6461
- https://github.com/TeamSeri0us/pocs/tree/master/gerbv
- https://gitlab.freedesktop.org/cairo/cairo/issues/352
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: coreutils
- Introduced through: coreutils@8.28-1ubuntu1
Detailed paths
-
Introduced through: buildpack-deps@bionic › coreutils@8.28-1ubuntu1
NVD Description
Note: Versions mentioned in the description apply only to the upstream coreutils package and not the coreutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
Remediation
There is no fixed version for Ubuntu:18.04 coreutils.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-2781
- https://security-tracker.debian.org/tracker/CVE-2016-2781
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- http://www.openwall.com/lists/oss-security/2016/02/28/2
- http://www.openwall.com/lists/oss-security/2016/02/28/3
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: libcroco/libcroco3
- Introduced through: libcroco/libcroco3@0.6.12-2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libcroco/libcroco3@0.6.12-2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libcroco package and not the libcroco package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.
Remediation
There is no fixed version for Ubuntu:18.04 libcroco.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-8871
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8871
- https://security-tracker.debian.org/tracker/CVE-2017-8871
- https://www.exploit-db.com/exploits/42147/
- https://bugzilla.gnome.org/show_bug.cgi?id=782649
- http://www.openwall.com/lists/oss-security/2020/08/13/3
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html
low severity
- Vulnerable module: libcroco/libcroco3
- Introduced through: libcroco/libcroco3@0.6.12-2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libcroco/libcroco3@0.6.12-2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libcroco package and not the libcroco package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.
Remediation
There is no fixed version for Ubuntu:18.04 libcroco.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-8834
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8834
- https://security-tracker.debian.org/tracker/CVE-2017-8834
- https://www.exploit-db.com/exploits/42147/
- https://bugzilla.gnome.org/show_bug.cgi?id=782647
- http://www.openwall.com/lists/oss-security/2020/08/13/3
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html
- https://www.exploit-db.com/exploits/42147
low severity
- Vulnerable module: libpng1.6/libpng-dev
- Introduced through: libpng1.6/libpng-dev@1.6.34-1ubuntu0.18.04.2 and libpng1.6/libpng16-16@1.6.34-1ubuntu0.18.04.2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libpng1.6/libpng-dev@1.6.34-1ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › libpng1.6/libpng16-16@1.6.34-1ubuntu0.18.04.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libpng1.6 package and not the libpng1.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
Remediation
There is no fixed version for Ubuntu:18.04 libpng1.6.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-14048
- https://seclists.org/bugtraq/2019/Apr/30
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14048
- https://security-tracker.debian.org/tracker/CVE-2018-14048
- https://security.gentoo.org/glsa/201908-02
- https://github.com/fouzhe/security/tree/master/libpng
- https://github.com/glennrp/libpng/issues/238
- http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
low severity
- Vulnerable module: librsvg/gir1.2-rsvg-2.0
- Introduced through: librsvg/gir1.2-rsvg-2.0@2.40.20-2ubuntu0.2, librsvg/librsvg2-2@2.40.20-2ubuntu0.2 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › librsvg/gir1.2-rsvg-2.0@2.40.20-2ubuntu0.2
-
Introduced through: buildpack-deps@bionic › librsvg/librsvg2-2@2.40.20-2ubuntu0.2
-
Introduced through: buildpack-deps@bionic › librsvg/librsvg2-common@2.40.20-2ubuntu0.2
-
Introduced through: buildpack-deps@bionic › librsvg/librsvg2-dev@2.40.20-2ubuntu0.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream librsvg package and not the librsvg package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
Remediation
There is no fixed version for Ubuntu:18.04 librsvg.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2019-20446
- https://security-tracker.debian.org/tracker/CVE-2019-20446
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/
- https://gitlab.gnome.org/GNOME/librsvg/issues/515
- https://lists.debian.org/debian-lts-announce/2020/07/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00024.html
- https://usn.ubuntu.com/4436-1/
- https://security.netapp.com/advisory/ntap-20221111-0004/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP/
low severity
- Vulnerable module: ncurses/libncurses5
- Introduced through: ncurses/libncurses5@6.1-1ubuntu1.18.04.1, ncurses/libncurses5-dev@6.1-1ubuntu1.18.04.1 and others
- Fixed in: 6.1-1ubuntu1.18.04.1+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › ncurses/libncurses5@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libncurses5-dev@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libncursesw5@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libncursesw5-dev@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libtinfo-dev@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/libtinfo5@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/ncurses-base@6.1-1ubuntu1.18.04.1
-
Introduced through: buildpack-deps@bionic › ncurses/ncurses-bin@6.1-1ubuntu1.18.04.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream ncurses package and not the ncurses package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().
Remediation
Upgrade Ubuntu:18.04 ncurses to version 6.1-1ubuntu1.18.04.1+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-50495
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html
- https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html
- https://security.netapp.com/advisory/ntap-20240119-0008/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.
Remediation
There is no fixed version for Ubuntu:18.04 tiff.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-10126
- https://security-tracker.debian.org/tracker/CVE-2018-10126
- http://bugzilla.maptools.org/show_bug.cgi?id=2786
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3316
- https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/
- https://gitlab.com/libtiff/libtiff/-/issues/515
- https://gitlab.com/libtiff/libtiff/-/merge_requests/468
- https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm5
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm5 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-6277
- https://access.redhat.com/security/cve/CVE-2023-6277
- https://bugzilla.redhat.com/show_bug.cgi?id=2251311
- https://gitlab.com/libtiff/libtiff/-/issues/614
- https://gitlab.com/libtiff/libtiff/-/merge_requests/545
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJIN6DTSL3VODZUGWEUXLEL5DR53EZMV/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y7ZGN2MZXJ6E57W3L4YBM3ZPAU3T7T5C/
- https://security.netapp.com/advisory/ntap-20240119-0002/
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm3 or higher.
References
low severity
- Vulnerable module: configobj/python-configobj
- Introduced through: configobj/python-configobj@5.0.6-2
Detailed paths
-
Introduced through: buildpack-deps@bionic › configobj/python-configobj@5.0.6-2
NVD Description
Note: Versions mentioned in the description apply only to the upstream configobj package and not the configobj package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)((.*)).
Note: This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.
Remediation
There is no fixed version for Ubuntu:18.04 configobj.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-26112
- https://github.com/DiffSK/configobj/issues/232
- https://security.snyk.io/vuln/SNYK-PYTHON-CONFIGOBJ-3252494
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NZHY7B33EFY4LESP2NI4APQUPRROTAZK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BO4RLMYEJODCNUE3DJIIUUFVTPAG6VN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYU4IHVLOTYMFPH7KDOJGKZQR4GKWPFK/
low severity
- Vulnerable module: curl
- Introduced through: curl@7.58.0-2ubuntu3.24, curl/libcurl3-gnutls@7.58.0-2ubuntu3.24 and others
- Fixed in: 7.58.0-2ubuntu3.24+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › curl@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl3-gnutls@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4-openssl-dev@7.58.0-2ubuntu3.24
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with xn-- and should not be allowed to pattern match, but the wildcard check in curl could still check for x*, which would match even though the IDN name most likely contained nothing even resembling an x.
Remediation
Upgrade Ubuntu:18.04 curl to version 7.58.0-2ubuntu3.24+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-28321
- https://hackerone.com/reports/1950627
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
- https://security.netapp.com/advisory/ntap-20230609-0009/
- https://support.apple.com/kb/HT213843
- https://support.apple.com/kb/HT213844
- https://support.apple.com/kb/HT213845
- http://seclists.org/fulldisclosure/2023/Jul/47
- http://seclists.org/fulldisclosure/2023/Jul/48
- http://seclists.org/fulldisclosure/2023/Jul/52
- https://security.gentoo.org/glsa/202310-12
- https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
low severity
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.
Remediation
There is no fixed version for Ubuntu:18.04 glibc.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2015-8985
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779392
- https://security-tracker.debian.org/tracker/CVE-2015-8985
- https://security.gentoo.org/glsa/201908-06
- http://www.openwall.com/lists/oss-security/2017/02/14/9
- http://www.securityfocus.com/bid/76916
low severity
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
- Fixed in: 2.27-3ubuntu1.6+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.
Remediation
Upgrade Ubuntu:18.04 glibc to version 2.27-3ubuntu1.6+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4813
- https://access.redhat.com/security/cve/CVE-2023-4813
- https://bugzilla.redhat.com/show_bug.cgi?id=2237798
- http://www.openwall.com/lists/oss-security/2023/10/03/8
- https://access.redhat.com/errata/RHSA-2023:5453
- https://access.redhat.com/errata/RHSA-2023:5455
- https://security.netapp.com/advisory/ntap-20231110-0003/
- https://access.redhat.com/errata/RHSA-2023:7409
low severity
- Vulnerable module: glibc/libc-bin
- Introduced through: glibc/libc-bin@2.27-3ubuntu1.6, glibc/libc-dev-bin@2.27-3ubuntu1.6 and others
- Fixed in: 2.27-3ubuntu1.6+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › glibc/libc-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc-dev-bin@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/libc6-dev@2.27-3ubuntu1.6
-
Introduced through: buildpack-deps@bionic › glibc/multiarch-support@2.27-3ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream glibc package and not the glibc package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nss_gethostbyname2_r and nss_getcanonname_r hooks without implementing the nss*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
Remediation
Upgrade Ubuntu:18.04 glibc to version 2.27-3ubuntu1.6+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4806
- https://access.redhat.com/security/cve/CVE-2023-4806
- https://bugzilla.redhat.com/show_bug.cgi?id=2237782
- http://www.openwall.com/lists/oss-security/2023/10/03/4
- http://www.openwall.com/lists/oss-security/2023/10/03/5
- http://www.openwall.com/lists/oss-security/2023/10/03/6
- http://www.openwall.com/lists/oss-security/2023/10/03/8
- https://security.gentoo.org/glsa/202310-03
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/
- https://access.redhat.com/errata/RHSA-2023:5453
- https://access.redhat.com/errata/RHSA-2023:5455
- https://access.redhat.com/errata/RHSA-2023:7409
- https://security.netapp.com/advisory/ntap-20240125-0008/
low severity
- Vulnerable module: openssh/openssh-client
- Introduced through: openssh/openssh-client@1:7.6p1-4ubuntu0.7
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssh/openssh-client@1:7.6p1-4ubuntu0.7
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
Remediation
There is no fixed version for Ubuntu:18.04 openssh.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2020-14145
- https://security.netapp.com/advisory/ntap-20200709-0004/
- https://security.gentoo.org/glsa/202105-35
- https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d
- https://docs.ssh-mitm.at/CVE-2020-14145.html
- https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1
- https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py
- https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/
- http://www.openwall.com/lists/oss-security/2020/12/02/1
low severity
- Vulnerable module: gnutls28/libgnutls30
- Introduced through: gnutls28/libgnutls30@3.5.18-1ubuntu1.6
Detailed paths
-
Introduced through: buildpack-deps@bionic › gnutls28/libgnutls30@3.5.18-1ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream gnutls28 package and not the gnutls28 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
Remediation
There is no fixed version for Ubuntu:18.04 gnutls28.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2018-16868
- https://security-tracker.debian.org/tracker/CVE-2018-16868
- http://cat.eyalro.net/
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00068.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16868
- http://www.securityfocus.com/bid/106080
low severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).
Remediation
There is no fixed version for Ubuntu:18.04 binutils.
References
low severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
Remediation
There is no fixed version for Ubuntu:18.04 binutils.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-48064
- https://sourceware.org/bugzilla/show_bug.cgi?id=29922
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8f2c64de86bc3d7556121fe296dd679000283931
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z/
- https://security.netapp.com/advisory/ntap-20231006-0008/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M/
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931
low severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.
Remediation
There is no fixed version for Ubuntu:18.04 binutils.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2019-1010204
- https://support.f5.com/csp/article/K05032915?utm_source=f5support&utm_medium=RSS
- https://security-tracker.debian.org/tracker/CVE-2019-1010204
- https://sourceware.org/bugzilla/show_bug.cgi?id=23765
- https://security.netapp.com/advisory/ntap-20190822-0001/
- https://support.f5.com/csp/article/K05032915?utm_source=f5support&%3Butm_medium=RSS
low severity
- Vulnerable module: binutils
- Introduced through: binutils@2.30-21ubuntu1~18.04.9, binutils/binutils-common@2.30-21ubuntu1~18.04.9 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › binutils@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-common@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/binutils-x86-64-linux-gnu@2.30-21ubuntu1~18.04.9
-
Introduced through: buildpack-deps@bionic › binutils/libbinutils@2.30-21ubuntu1~18.04.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
Remediation
There is no fixed version for Ubuntu:18.04 binutils.
References
low severity
- Vulnerable module: cairo/libcairo-gobject2
- Introduced through: cairo/libcairo-gobject2@1.15.10-2ubuntu0.1, cairo/libcairo-script-interpreter2@1.15.10-2ubuntu0.1 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › cairo/libcairo-gobject2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo-script-interpreter2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo2@1.15.10-2ubuntu0.1
-
Introduced through: buildpack-deps@bionic › cairo/libcairo2-dev@1.15.10-2ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream cairo package and not the cairo package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
Remediation
There is no fixed version for Ubuntu:18.04 cairo.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-7475
- https://security-tracker.debian.org/tracker/CVE-2017-7475
- https://bugs.freedesktop.org/show_bug.cgi?id=100763
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- http://seclists.org/oss-sec/2017/q2/151
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: elfutils/libelf1
- Introduced through: elfutils/libelf1@0.170-0.4ubuntu0.1
- Fixed in: 0.170-0.4ubuntu0.1+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › elfutils/libelf1@0.170-0.4ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream elfutils package and not the elfutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.
Remediation
Upgrade Ubuntu:18.04 elfutils to version 0.170-0.4ubuntu0.1+esm1 or higher.
References
low severity
- Vulnerable module: libcroco/libcroco3
- Introduced through: libcroco/libcroco3@0.6.12-2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libcroco/libcroco3@0.6.12-2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libcroco package and not the libcroco package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.
Remediation
There is no fixed version for Ubuntu:18.04 libcroco.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2017-7960
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7960
- https://security-tracker.debian.org/tracker/CVE-2017-7960
- https://security.gentoo.org/glsa/201707-13
- https://blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior/
- https://git.gnome.org/browse/libcroco/commit/?id=898e3a8c8c0314d2e6b106809a8e3e93cf9d4394
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html
low severity
- Vulnerable module: libpng1.6/libpng-dev
- Introduced through: libpng1.6/libpng-dev@1.6.34-1ubuntu0.18.04.2 and libpng1.6/libpng16-16@1.6.34-1ubuntu0.18.04.2
Detailed paths
-
Introduced through: buildpack-deps@bionic › libpng1.6/libpng-dev@1.6.34-1ubuntu0.18.04.2
-
Introduced through: buildpack-deps@bionic › libpng1.6/libpng16-16@1.6.34-1ubuntu0.18.04.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream libpng1.6 package and not the libpng1.6 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in libpng 1.6.38. A crafted PNG image can lead to a segmentation fault and denial of service in png_setup_paeth_row() function.
Remediation
There is no fixed version for Ubuntu:18.04 libpng1.6.
References
low severity
- Vulnerable module: openexr/libopenexr-dev
- Introduced through: openexr/libopenexr-dev@2.2.0-11.1ubuntu1.9 and openexr/libopenexr22@2.2.0-11.1ubuntu1.9
Detailed paths
-
Introduced through: buildpack-deps@bionic › openexr/libopenexr-dev@2.2.0-11.1ubuntu1.9
-
Introduced through: buildpack-deps@bionic › openexr/libopenexr22@2.2.0-11.1ubuntu1.9
NVD Description
Note: Versions mentioned in the description apply only to the upstream openexr package and not the openexr package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.
Remediation
There is no fixed version for Ubuntu:18.04 openexr.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2021-45942
- https://github.com/AcademySoftwareFoundation/openexr/pull/1209
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416
- https://github.com/AcademySoftwareFoundation/openexr/commit/11cad77da87c4fa2aab7d58dd5339e254db7937e
- https://github.com/AcademySoftwareFoundation/openexr/commit/db217f29dfb24f6b4b5100c24ac5e7490e1c57d0
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2021-1627.yaml
- https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.1.4
- https://github.com/AcademySoftwareFoundation/openexr/blob/v3.1.4/CHANGES.md#version-314-january-26-2022
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HJ5PW4WNXBKCRFGDZGAQOSVH2BKZKL4X/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJUK7WIQV5EKWTCZBRXFN6INHG6MLS5O/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6TEZDE2S2DB4BF4LZSSV4W3DNW7DSRHJ/
- https://security.gentoo.org/glsa/202210-31
- https://www.debian.org/security/2022/dsa-5299
- https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6TEZDE2S2DB4BF4LZSSV4W3DNW7DSRHJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HJ5PW4WNXBKCRFGDZGAQOSVH2BKZKL4X/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJUK7WIQV5EKWTCZBRXFN6INHG6MLS5O/
low severity
- Vulnerable module: openssl
- Introduced through: openssl@1.1.1-1ubuntu2.1~18.04.23, openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23 and others
- Fixed in: 1.1.1-1ubuntu2.1~18.04.23+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl1.1@1.1.1-1ubuntu2.1~18.04.23
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack
Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly.
A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue.
OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass().
We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant.
The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl to version 1.1.1-1ubuntu2.1~18.04.23+esm4 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-0727
- https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2
- https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a
- https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c
- https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8
- https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539
- https://www.openssl.org/news/secadv/20240125.txt
- https://security.netapp.com/advisory/ntap-20240208-0006/
- http://www.openwall.com/lists/oss-security/2024/03/11/1
low severity
- Vulnerable module: openssl1.0/libssl1.0.0
- Introduced through: openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
- Fixed in: 1.0.2n-1ubuntu5.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl1.0 package and not the openssl1.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack
Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly.
A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue.
OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass().
We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant.
The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl1.0 to version 1.0.2n-1ubuntu5.13+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-0727
- https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2
- https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a
- https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c
- https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8
- https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539
- https://www.openssl.org/news/secadv/20240125.txt
- https://security.netapp.com/advisory/ntap-20240208-0006/
- http://www.openwall.com/lists/oss-security/2024/03/11/1
low severity
- Vulnerable module: patch
- Introduced through: patch@2.7.6-2ubuntu1.1
Detailed paths
-
Introduced through: buildpack-deps@bionic › patch@2.7.6-2ubuntu1.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream patch package and not the patch package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
Remediation
There is no fixed version for Ubuntu:18.04 patch.
References
low severity
- Vulnerable module: shadow/login
- Introduced through: shadow/login@1:4.5-1ubuntu2.5 and shadow/passwd@1:4.5-1ubuntu2.5
- Fixed in: 1:4.5-1ubuntu2.5+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › shadow/login@1:4.5-1ubuntu2.5
-
Introduced through: buildpack-deps@bionic › shadow/passwd@1:4.5-1ubuntu2.5
NVD Description
Note: Versions mentioned in the description apply only to the upstream shadow package and not the shadow package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.
Remediation
Upgrade Ubuntu:18.04 shadow to version 1:4.5-1ubuntu2.5+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-4641
- https://access.redhat.com/errata/RHSA-2023:6632
- https://access.redhat.com/errata/RHSA-2023:7112
- https://access.redhat.com/security/cve/CVE-2023-4641
- https://bugzilla.redhat.com/show_bug.cgi?id=2215945
- https://access.redhat.com/errata/RHSA-2024:0417
- https://access.redhat.com/errata/RHSA-2024:2577
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm4 or higher.
References
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.
Remediation
There is no fixed version for Ubuntu:18.04 tiff.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3164
- https://access.redhat.com/security/cve/CVE-2023-4156
- https://bugzilla.redhat.com/show_bug.cgi?id=2215930
- https://access.redhat.com/security/cve/CVE-2023-3164
- https://bugzilla.redhat.com/show_bug.cgi?id=2213531
- https://gitlab.com/libtiff/libtiff/-/issues/542
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm1 or higher.
References
low severity
- Vulnerable module: tiff/libtiff-dev
- Introduced through: tiff/libtiff-dev@4.0.9-5ubuntu0.10, tiff/libtiff5@4.0.9-5ubuntu0.10 and others
- Fixed in: 4.0.9-5ubuntu0.10+esm5
Detailed paths
-
Introduced through: buildpack-deps@bionic › tiff/libtiff-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiff5-dev@4.0.9-5ubuntu0.10
-
Introduced through: buildpack-deps@bionic › tiff/libtiffxx5@4.0.9-5ubuntu0.10
NVD Description
Note: Versions mentioned in the description apply only to the upstream tiff package and not the tiff package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
Remediation
Upgrade Ubuntu:18.04 tiff to version 4.0.9-5ubuntu0.10+esm5 or higher.
References
low severity
- Vulnerable module: openssl
- Introduced through: openssl@1.1.1-1ubuntu2.1~18.04.23, openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23 and others
- Fixed in: 1.1.1-1ubuntu2.1~18.04.23+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl1.1@1.1.1-1ubuntu2.1~18.04.23
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p.
An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the "-check" option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl to version 1.1.1-1ubuntu2.1~18.04.23+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3817
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5
- https://www.openssl.org/news/secadv/20230731.txt
- http://www.openwall.com/lists/oss-security/2023/07/31/1
- http://seclists.org/fulldisclosure/2023/Jul/43
- https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
- https://security.netapp.com/advisory/ntap-20230818-0014/
- http://www.openwall.com/lists/oss-security/2023/09/22/9
- http://www.openwall.com/lists/oss-security/2023/09/22/11
- https://security.netapp.com/advisory/ntap-20231027-0008/
- http://www.openwall.com/lists/oss-security/2023/11/06/2
- https://security.gentoo.org/glsa/202402-08
low severity
- Vulnerable module: openssl
- Introduced through: openssl@1.1.1-1ubuntu2.1~18.04.23, openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23 and others
- Fixed in: 1.1.1-1ubuntu2.1~18.04.23+esm4
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl1.1@1.1.1-1ubuntu2.1~18.04.23
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters.
Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q.
An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.
DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().
Also vulnerable are the OpenSSL pkey command line application when using the "-pubcheck" option, as well as the OpenSSL genpkey command line application.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl to version 1.1.1-1ubuntu2.1~18.04.23+esm4 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5678
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
- https://www.openssl.org/news/secadv/20231106.txt
- http://www.openwall.com/lists/oss-security/2023/11/06/2
- https://security.netapp.com/advisory/ntap-20231130-0010/
- http://www.openwall.com/lists/oss-security/2024/03/11/1
low severity
- Vulnerable module: openssl
- Introduced through: openssl@1.1.1-1ubuntu2.1~18.04.23, openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23 and others
- Fixed in: 1.1.1-1ubuntu2.1~18.04.23+esm3
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl-dev@1.1.1-1ubuntu2.1~18.04.23
-
Introduced through: buildpack-deps@bionic › openssl/libssl1.1@1.1.1-1ubuntu2.1~18.04.23
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ('p' parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length.
However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large.
An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the '-check' option.
The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl to version 1.1.1-1ubuntu2.1~18.04.23+esm3 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3446
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23
- https://www.openssl.org/news/secadv/20230719.txt
- http://www.openwall.com/lists/oss-security/2023/07/19/4
- http://www.openwall.com/lists/oss-security/2023/07/19/5
- http://www.openwall.com/lists/oss-security/2023/07/19/6
- http://www.openwall.com/lists/oss-security/2023/07/31/1
- https://security.netapp.com/advisory/ntap-20230803-0011/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
- https://security.gentoo.org/glsa/202402-08
low severity
- Vulnerable module: openssl1.0/libssl1.0.0
- Introduced through: openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
- Fixed in: 1.0.2n-1ubuntu5.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl1.0 package and not the openssl1.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p.
An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the "-check" option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl1.0 to version 1.0.2n-1ubuntu5.13+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3817
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5
- https://www.openssl.org/news/secadv/20230731.txt
- http://www.openwall.com/lists/oss-security/2023/07/31/1
- http://seclists.org/fulldisclosure/2023/Jul/43
- https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
- https://security.netapp.com/advisory/ntap-20230818-0014/
- http://www.openwall.com/lists/oss-security/2023/09/22/9
- http://www.openwall.com/lists/oss-security/2023/09/22/11
- https://security.netapp.com/advisory/ntap-20231027-0008/
- http://www.openwall.com/lists/oss-security/2023/11/06/2
- https://security.gentoo.org/glsa/202402-08
low severity
- Vulnerable module: openssl1.0/libssl1.0.0
- Introduced through: openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
- Fixed in: 1.0.2n-1ubuntu5.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl1.0 package and not the openssl1.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters.
Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q.
An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.
DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().
Also vulnerable are the OpenSSL pkey command line application when using the "-pubcheck" option, as well as the OpenSSL genpkey command line application.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl1.0 to version 1.0.2n-1ubuntu5.13+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-5678
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
- https://www.openssl.org/news/secadv/20231106.txt
- http://www.openwall.com/lists/oss-security/2023/11/06/2
- https://security.netapp.com/advisory/ntap-20231130-0010/
- http://www.openwall.com/lists/oss-security/2024/03/11/1
low severity
- Vulnerable module: openssl1.0/libssl1.0.0
- Introduced through: openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
- Fixed in: 1.0.2n-1ubuntu5.13+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › openssl1.0/libssl1.0.0@1.0.2n-1ubuntu5.13
NVD Description
Note: Versions mentioned in the description apply only to the upstream openssl1.0 package and not the openssl1.0 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ('p' parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length.
However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large.
An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack.
The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().
Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the '-check' option.
The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
Remediation
Upgrade Ubuntu:18.04 openssl1.0 to version 1.0.2n-1ubuntu5.13+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-3446
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23
- https://www.openssl.org/news/secadv/20230719.txt
- http://www.openwall.com/lists/oss-security/2023/07/19/4
- http://www.openwall.com/lists/oss-security/2023/07/19/5
- http://www.openwall.com/lists/oss-security/2023/07/19/6
- http://www.openwall.com/lists/oss-security/2023/07/31/1
- https://security.netapp.com/advisory/ntap-20230803-0011/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
- https://security.gentoo.org/glsa/202402-08
low severity
- Vulnerable module: shadow/login
- Introduced through: shadow/login@1:4.5-1ubuntu2.5 and shadow/passwd@1:4.5-1ubuntu2.5
Detailed paths
-
Introduced through: buildpack-deps@bionic › shadow/login@1:4.5-1ubuntu2.5
-
Introduced through: buildpack-deps@bionic › shadow/passwd@1:4.5-1ubuntu2.5
NVD Description
Note: Versions mentioned in the description apply only to the upstream shadow package and not the shadow package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees
Remediation
There is no fixed version for Ubuntu:18.04 shadow.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2013-4235
- https://security-tracker.debian.org/tracker/CVE-2013-4235
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4235
- https://access.redhat.com/security/cve/cve-2013-4235
- https://security.gentoo.org/glsa/202210-26
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: curl
- Introduced through: curl@7.58.0-2ubuntu3.24, curl/libcurl3-gnutls@7.58.0-2ubuntu3.24 and others
- Fixed in: 7.58.0-2ubuntu3.24+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › curl@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl3-gnutls@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4-openssl-dev@7.58.0-2ubuntu3.24
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set, if the same handle previously wasused to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST.
Remediation
Upgrade Ubuntu:18.04 curl to version 7.58.0-2ubuntu3.24+esm1 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-28322
- https://hackerone.com/reports/1954658
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
- https://security.netapp.com/advisory/ntap-20230609-0009/
- https://support.apple.com/kb/HT213843
- https://support.apple.com/kb/HT213844
- https://support.apple.com/kb/HT213845
- http://seclists.org/fulldisclosure/2023/Jul/47
- http://seclists.org/fulldisclosure/2023/Jul/48
- http://seclists.org/fulldisclosure/2023/Jul/52
- https://security.gentoo.org/glsa/202310-12
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/
- https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
low severity
- Vulnerable module: curl
- Introduced through: curl@7.58.0-2ubuntu3.24, curl/libcurl3-gnutls@7.58.0-2ubuntu3.24 and others
- Fixed in: 7.58.0-2ubuntu3.24+esm2
Detailed paths
-
Introduced through: buildpack-deps@bionic › curl@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl3-gnutls@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4@7.58.0-2ubuntu3.24
-
Introduced through: buildpack-deps@bionic › curl/libcurl4-openssl-dev@7.58.0-2ubuntu3.24
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.
libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers.
libcurl provides a function call that duplicates en easy handle called curl_easy_duphandle.
If a transfer has cookies enabled when the handle is duplicated, the
cookie-enable state is also cloned - but without cloning the actual
cookies. If the source handle did not read any cookies from a specific file on
disk, the cloned version of the handle would instead store the file name as
none (using the four ASCII letters, no quotes).
Subsequent use of the cloned handle that does not explicitly set a source to
load cookies from would then inadvertently load cookies from a file named
none - if such a file exists and is readable in the current directory of the
program using libcurl. And if using the correct file format of course.
Remediation
Upgrade Ubuntu:18.04 curl to version 7.58.0-2ubuntu3.24+esm2 or higher.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-38546
- https://curl.se/docs/CVE-2023-38546.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/
- https://support.apple.com/kb/HT214057
- https://support.apple.com/kb/HT214058
- https://support.apple.com/kb/HT214063
- https://support.apple.com/kb/HT214036
- http://seclists.org/fulldisclosure/2024/Jan/34
- http://seclists.org/fulldisclosure/2024/Jan/37
- http://seclists.org/fulldisclosure/2024/Jan/38
low severity
- Vulnerable module: gnupg2/dirmngr
- Introduced through: gnupg2/dirmngr@2.2.4-1ubuntu1.6, gnupg2/gnupg@2.2.4-1ubuntu1.6 and others
Detailed paths
-
Introduced through: buildpack-deps@bionic › gnupg2/dirmngr@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gnupg@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gnupg-l10n@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gnupg-utils@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpg@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpg-agent@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpg-wks-client@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpg-wks-server@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpgconf@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpgsm@2.2.4-1ubuntu1.6
-
Introduced through: buildpack-deps@bionic › gnupg2/gpgv@2.2.4-1ubuntu1.6
NVD Description
Note: Versions mentioned in the description apply only to the upstream gnupg2 package and not the gnupg2 package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
Remediation
There is no fixed version for Ubuntu:18.04 gnupg2.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2022-3219
- https://access.redhat.com/security/cve/CVE-2022-3219
- https://bugzilla.redhat.com/show_bug.cgi?id=2127010
- https://dev.gnupg.org/D556
- https://dev.gnupg.org/T5993
- https://marc.info/?l=oss-security&m=165696590211434&w=4
- https://security.netapp.com/advisory/ntap-20230324-0001/
low severity
- Vulnerable module: procps
- Introduced through: procps@2:3.3.12-3ubuntu1.2 and procps/libprocps6@2:3.3.12-3ubuntu1.2
- Fixed in: 2:3.3.12-3ubuntu1.2+esm1
Detailed paths
-
Introduced through: buildpack-deps@bionic › procps@2:3.3.12-3ubuntu1.2
-
Introduced through: buildpack-deps@bionic › procps/libprocps6@2:3.3.12-3ubuntu1.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream procps package and not the procps package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.
Remediation
Upgrade Ubuntu:18.04 procps to version 2:3.3.12-3ubuntu1.2+esm1 or higher.
References
low severity
- Vulnerable module: shadow/login
- Introduced through: shadow/login@1:4.5-1ubuntu2.5 and shadow/passwd@1:4.5-1ubuntu2.5
Detailed paths
-
Introduced through: buildpack-deps@bionic › shadow/login@1:4.5-1ubuntu2.5
-
Introduced through: buildpack-deps@bionic › shadow/passwd@1:4.5-1ubuntu2.5
NVD Description
Note: Versions mentioned in the description apply only to the upstream shadow package and not the shadow package as distributed by Ubuntu.
See How to fix? for Ubuntu:18.04 relevant fixed versions and status.
In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
Remediation
There is no fixed version for Ubuntu:18.04 shadow.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2023-29383
- https://github.com/shadow-maint/shadow/commit/e5905c4b84d4fb90aefcd96ee618411ebfac663d
- https://github.com/shadow-maint/shadow/pull/687
- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-29383-abusing-linux-chfn-to-misrepresent-etc-passwd/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=31797