Vulnerabilities |
10 via 21 paths |
|---|---|
Dependencies |
115 |
Source |
Docker |
Target OS |
ubuntu:24.04 |
medium severity
- Vulnerable module: p11-kit/libp11-kit0
- Introduced through: p11-kit/libp11-kit0@0.25.3-4ubuntu2.1
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › p11-kit/libp11-kit0@0.25.3-4ubuntu2.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream p11-kit package and not the p11-kit package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
Remediation
There is no fixed version for Ubuntu:24.04 p11-kit.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-13757
- https://access.redhat.com/errata/RHSA-2026:37469
- https://access.redhat.com/errata/RHSA-2026:38342
- https://access.redhat.com/errata/RHSA-2026:49668
- https://access.redhat.com/security/cve/CVE-2026-13757
- https://bugzilla.redhat.com/show_bug.cgi?id=2494556
- https://github.com/advisories/GHSA-p2wm-69qx-x25w
- https://access.redhat.com/errata/RHSA-2026:49667
- https://access.redhat.com/errata/RHSA-2026:53371
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:54760
medium severity
new
- Vulnerable module: systemd/libsystemd0
- Introduced through: systemd/libsystemd0@255.4-1ubuntu8.16 and systemd/libudev1@255.4-1ubuntu8.16
- Fixed in: 255.4-1ubuntu8.17
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › systemd/libsystemd0@255.4-1ubuntu8.16
-
Introduced through: grafana/grafana@latest-ubuntu › systemd/libudev1@255.4-1ubuntu8.16
NVD Description
Note: Versions mentioned in the description apply only to the upstream systemd package and not the systemd package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.
Remediation
Upgrade Ubuntu:24.04 systemd to version 255.4-1ubuntu8.17 or higher.
References
medium severity
new
- Vulnerable module: systemd/libsystemd0
- Introduced through: systemd/libsystemd0@255.4-1ubuntu8.16 and systemd/libudev1@255.4-1ubuntu8.16
- Fixed in: 255.4-1ubuntu8.17
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › systemd/libsystemd0@255.4-1ubuntu8.16
-
Introduced through: grafana/grafana@latest-ubuntu › systemd/libudev1@255.4-1ubuntu8.16
NVD Description
Note: Versions mentioned in the description apply only to the upstream systemd package and not the systemd package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
Remediation
Upgrade Ubuntu:24.04 systemd to version 255.4-1ubuntu8.17 or higher.
References
medium severity
- Vulnerable module: util-linux
- Introduced through: util-linux@2.39.3-9ubuntu6.5, util-linux/bsdutils@1:2.39.3-9ubuntu6.5 and others
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux@2.39.3-9ubuntu6.5
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux/bsdutils@1:2.39.3-9ubuntu6.5
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux/libblkid1@2.39.3-9ubuntu6.5
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux/libmount1@2.39.3-9ubuntu6.5
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux/libsmartcols1@2.39.3-9ubuntu6.5
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux/libuuid1@2.39.3-9ubuntu6.5
-
Introduced through: grafana/grafana@latest-ubuntu › util-linux/mount@2.39.3-9ubuntu6.5
NVD Description
Note: Versions mentioned in the description apply only to the upstream util-linux package and not the util-linux package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.
Remediation
There is no fixed version for Ubuntu:24.04 util-linux.
References
low severity
- Vulnerable module: coreutils
- Introduced through: coreutils@9.4-3ubuntu6.2
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › coreutils@9.4-3ubuntu6.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream coreutils package and not the coreutils package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
Remediation
There is no fixed version for Ubuntu:24.04 coreutils.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-2781
- https://security-tracker.debian.org/tracker/CVE-2016-2781
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
- http://www.openwall.com/lists/oss-security/2016/02/28/2
- http://www.openwall.com/lists/oss-security/2016/02/28/3
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
low severity
- Vulnerable module: zlib/zlib1g
- Introduced through: zlib/zlib1g@1:1.3.dfsg-3.1ubuntu2.1
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › zlib/zlib1g@1:1.3.dfsg-3.1ubuntu2.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream zlib package and not the zlib package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
Remediation
There is no fixed version for Ubuntu:24.04 zlib.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-27171
- https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/
- https://github.com/madler/zlib/releases/tag/v1.3.2
- https://ostif.org/zlib-audit-complete/
- https://github.com/madler/zlib/issues/904
- https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf
low severity
- Vulnerable module: systemd/libsystemd0
- Introduced through: systemd/libsystemd0@255.4-1ubuntu8.16 and systemd/libudev1@255.4-1ubuntu8.16
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › systemd/libsystemd0@255.4-1ubuntu8.16
-
Introduced through: grafana/grafana@latest-ubuntu › systemd/libudev1@255.4-1ubuntu8.16
NVD Description
Note: Versions mentioned in the description apply only to the upstream systemd package and not the systemd package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.
Remediation
There is no fixed version for Ubuntu:24.04 systemd.
References
low severity
- Vulnerable module: curl
- Introduced through: curl@8.5.0-2ubuntu10.11 and curl/libcurl4t64@8.5.0-2ubuntu10.11
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › curl@8.5.0-2ubuntu10.11
-
Introduced through: grafana/grafana@latest-ubuntu › curl/libcurl4t64@8.5.0-2ubuntu10.11
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse.
libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.
Remediation
There is no fixed version for Ubuntu:24.04 curl.
References
low severity
- Vulnerable module: libgcrypt20
- Introduced through: libgcrypt20@1.10.3-2ubuntu0.1
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › libgcrypt20@1.10.3-2ubuntu0.1
NVD Description
Note: Versions mentioned in the description apply only to the upstream libgcrypt20 package and not the libgcrypt20 package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.
Remediation
There is no fixed version for Ubuntu:24.04 libgcrypt20.
References
- http://people.ubuntu.com/~ubuntu-security/cve/CVE-2024-2236
- https://access.redhat.com/errata/RHSA-2024:9404
- https://bugzilla.redhat.com/show_bug.cgi?id=2268268
- https://access.redhat.com/errata/RHSA-2025:3534
- https://access.redhat.com/errata/RHSA-2025:3530
- https://access.redhat.com/security/cve/CVE-2024-2236
- https://bugzilla.redhat.com/show_bug.cgi?id=2245218
low severity
- Vulnerable module: shadow/login
- Introduced through: shadow/login@1:4.13+dfsg1-4ubuntu3.2 and shadow/passwd@1:4.13+dfsg1-4ubuntu3.2
Detailed paths
-
Introduced through: grafana/grafana@latest-ubuntu › shadow/login@1:4.13+dfsg1-4ubuntu3.2
-
Introduced through: grafana/grafana@latest-ubuntu › shadow/passwd@1:4.13+dfsg1-4ubuntu3.2
NVD Description
Note: Versions mentioned in the description apply only to the upstream shadow package and not the shadow package as distributed by Ubuntu.
See How to fix? for Ubuntu:24.04 relevant fixed versions and status.
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.
Remediation
There is no fixed version for Ubuntu:24.04 shadow.