Canonical: Security Vulnerabilities
NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.
CVSS Score
5.5
EPSS Score
0.002
Published
2024-06-13
netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected.
CVSS Score
6.5
EPSS Score
0.003
Published
2024-06-07
is_closing_session() allows users to consume RAM in the Apport process
CVSS Score
5.5
EPSS Score
0.002
Published
2024-06-04
Apport does not disable python crash handler before entering chroot
CVSS Score
7.8
EPSS Score
0.002
Published
2024-06-04
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
CVSS Score
5.5
EPSS Score
0.002
Published
2024-06-04
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
CVSS Score
5.5
EPSS Score
0.002
Published
2024-06-04
is_closing_session() allows users to fill up apport.log
CVSS Score
5.5
EPSS Score
0.003
Published
2024-06-04
is_closing_session() allows users to create arbitrary tcp dbus connections
CVSS Score
7.1
EPSS Score
0.002
Published
2024-06-04
Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions
CVSS Score
8.4
EPSS Score
0.003
Published
2024-06-03
Apport can be tricked into connecting to arbitrary sockets as the root user
CVSS Score
7.8
EPSS Score
0.002
Published
2024-06-03