ubuntu_linux Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ubuntu_linux/ Sun, 26 Feb 2023 06:51:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ubuntu_linux Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ubuntu_linux/ 32 32 CVE-2018-7480 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7480/ Sun, 26 Feb 2023 06:51:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7480/ The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.

The post CVE-2018-7480 appeared first on CVE Vulnerability.

]]> The blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local users to cause a denial of service (double free) or possibly have unspecified other impact by triggering a creation failure.

The post CVE-2018-7480 appeared first on CVE Vulnerability.

]]> CVE-2018-5332 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5332/ Sun, 26 Feb 2023 06:50:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5332/ In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

The post CVE-2018-5332 appeared first on CVE Vulnerability.

]]> In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

The post CVE-2018-5332 appeared first on CVE Vulnerability.

]]> CVE-2018-17182 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17182/ Sun, 26 Feb 2023 06:47:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17182/ An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

The post CVE-2018-17182 appeared first on CVE Vulnerability.

]]> An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

The post CVE-2018-17182 appeared first on CVE Vulnerability.

]]> CVE-2018-16276 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16276/ Sun, 26 Feb 2023 06:46:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16276/ An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.

The post CVE-2018-16276 appeared first on CVE Vulnerability.

]]> An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.

The post CVE-2018-16276 appeared first on CVE Vulnerability.

]]> CVE-2018-14678 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14678/ Sun, 26 Feb 2023 06:46:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14678/ An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a […]

The post CVE-2018-14678 appeared first on CVE Vulnerability.

]]> An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.

The post CVE-2018-14678 appeared first on CVE Vulnerability.

]]> CVE-2018-13406 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-13406/ Sun, 26 Feb 2023 06:46:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-13406/ An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.

The post CVE-2018-13406 appeared first on CVE Vulnerability.

]]> An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.

The post CVE-2018-13406 appeared first on CVE Vulnerability.

]]> CVE-2018-11506 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11506/ Sun, 26 Feb 2023 06:45:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11506/ The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.

The post CVE-2018-11506 appeared first on CVE Vulnerability.

]]> The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.

The post CVE-2018-11506 appeared first on CVE Vulnerability.

]]> CVE-2018-10925 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10925/ Sun, 26 Feb 2023 06:45:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10925/ It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with “INSERT … ON CONFLICT DO UPDATE”. An attacker with “CREATE TABLE” privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain “INSERT” and limited “UPDATE” privileges […]

The post CVE-2018-10925 appeared first on CVE Vulnerability.

]]> It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with “INSERT … ON CONFLICT DO UPDATE”. An attacker with “CREATE TABLE” privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain “INSERT” and limited “UPDATE” privileges to a particular table, they could exploit this to update other columns in the same table.

The post CVE-2018-10925 appeared first on CVE Vulnerability.

]]> CVE-2020-13974 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-13974/ Sun, 26 Feb 2023 06:37:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-13974/ An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.

The post CVE-2020-13974 appeared first on CVE Vulnerability.

]]> An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in the community argue that the integer overflow does not lead to a security issue in this case.

The post CVE-2020-13974 appeared first on CVE Vulnerability.

]]> CVE-2019-7581 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7581/ Sun, 26 Feb 2023 06:34:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7581/ The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure, a different vulnerability than CVE-2018-7876.

The post CVE-2019-7581 appeared first on CVE Vulnerability.

]]> The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure, a different vulnerability than CVE-2018-7876.

The post CVE-2019-7581 appeared first on CVE Vulnerability.

]]>