{"cves":[{"id":"CVE-2022-34038","published":"2023-08-22T19:16:00","updated_at":"2025-08-04T19:39:37.625757+00:00","description":"\nEtcd v3.5.4 allows remote attackers to cause a denial of service via\nfunction PageWriter.write in pagewriter.go. NOTE: the vendor's position is\nthat this is not a vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/etcd-io/etcd/pull/14022","https://github.com/etcd-io/etcd/pull/14452","https://www.cve.org/CVERecord?id=CVE-2022-34038"],"bugs":[""],"patches":{"etcd":[]},"tags":{},"packages":[{"name":"etcd","source":"https://ubuntu.com/security/cve?package=etcd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=etcd","debian":"https://tracker.debian.org/pkg/etcd","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"disputed","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"disputed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-29654","published":"2023-08-22T19:16:00","updated_at":"2025-09-26T22:17:10.226519+00:00","description":"\nBuffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm\nbefore 2.15.05 allows attackers to cause a denial of service via crafted\nfile.","ubuntu_description":"","notes":[{"author":"elisehdy","note":"This is a duplicate of CVE-2022-44370"}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.nasm.us/pub/nasm/releasebuilds/2.15.05/","https://gist.github.com/naihsin/b96e2c5c2c81621b46557fd7aacd165f","https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html","https://www.cve.org/CVERecord?id=CVE-2022-29654"],"bugs":[""],"patches":{"nasm":[]},"tags":{},"packages":[{"name":"nasm","source":"https://ubuntu.com/security/cve?package=nasm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nasm","debian":"https://tracker.debian.org/pkg/nasm","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-28073","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:50:50.404260+00:00","description":"\nA use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053","https://www.cve.org/CVERecord?id=CVE-2022-28073"],"bugs":[""],"patches":{"radare2":[]},"tags":{},"packages":[{"name":"radare2","source":"https://ubuntu.com/security/cve?package=radare2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=radare2","debian":"https://tracker.debian.org/pkg/radare2","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-28072","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:50:50.404260+00:00","description":"\nA heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/radareorg/radare2/commit/027cd9b7274988bb1af866539ba6c2fa2ff63e45","https://www.cve.org/CVERecord?id=CVE-2022-28072"],"bugs":[""],"patches":{"radare2":[]},"tags":{},"packages":[{"name":"radare2","source":"https://ubuntu.com/security/cve?package=radare2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=radare2","debian":"https://tracker.debian.org/pkg/radare2","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-28071","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:50:50.404260+00:00","description":"\nA use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/radareorg/radare2/commit/65448811e5b9582a19cf631e03cfcaa025a92ef5","https://www.cve.org/CVERecord?id=CVE-2022-28071"],"bugs":[""],"patches":{"radare2":[]},"tags":{},"packages":[{"name":"radare2","source":"https://ubuntu.com/security/cve?package=radare2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=radare2","debian":"https://tracker.debian.org/pkg/radare2","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-28070","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:50:50.404260+00:00","description":"\nA null pointer deference in __core_anal_fcn function in radare2 5.4.2 and\n5.4.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/radareorg/radare2/commit/4aff1bb00224de4f5bc118f987dfd5d2fe3450d0","https://www.cve.org/CVERecord?id=CVE-2022-28070"],"bugs":[""],"patches":{"radare2":[]},"tags":{},"packages":[{"name":"radare2","source":"https://ubuntu.com/security/cve?package=radare2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=radare2","debian":"https://tracker.debian.org/pkg/radare2","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-28069","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:50:50.404260+00:00","description":"\nA heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/radareorg/radare2/commit/49b0cebfdf0db9704e36f8a5533f1df6d3e2ed3a","https://www.cve.org/CVERecord?id=CVE-2022-28069"],"bugs":[""],"patches":{"radare2":[]},"tags":{},"packages":[{"name":"radare2","source":"https://ubuntu.com/security/cve?package=radare2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=radare2","debian":"https://tracker.debian.org/pkg/radare2","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-28068","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:50:48.375545+00:00","description":"\nA heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/radareorg/radare2/commit/637f4bd1af6752e28e0a9998e954e2e9ce6fa992","https://www.cve.org/CVERecord?id=CVE-2022-28068"],"bugs":[""],"patches":{"radare2":[]},"tags":{},"packages":[{"name":"radare2","source":"https://ubuntu.com/security/cve?package=radare2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=radare2","debian":"https://tracker.debian.org/pkg/radare2","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-26592","published":"2023-08-22T19:16:00","updated_at":"2025-08-26T12:43:59.698769+00:00","description":"\nStack Overflow vulnerability in libsass 3.6.5 via the\nCompoundSelector::has_real_parent_ref function.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2022-26592"],"bugs":["https://github.com/sass/libsass/issues/3174"],"patches":{"libsass":["upstream: https://github.com/sass/libsass/commit/5bb0ea0c4b2ebebe542933f788ffacba459a717a"]},"tags":{},"packages":[{"name":"libsass","source":"https://ubuntu.com/security/cve?package=libsass","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libsass","debian":"https://tracker.debian.org/pkg/libsass","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6.6,3.6.5+20231221-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"3.6.5+20231221-3","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"3.6.5+20231221-3","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"3.6.6-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"3.6.6-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"3.6.6-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46312","published":"2023-08-22T19:16:00","updated_at":"2026-02-23T17:54:20.596721+00:00","description":"\nAn issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows\nattackers to cause a denial of service via divide by zero.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nOnly a crash in an image parser"}],"codename":null,"priority":"low","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2021-46312","https://ubuntu.com/security/notices/USN-8054-1"],"bugs":["https://sourceforge.net/p/djvu/bugs/344/"],"patches":{"djvulibre":["upstream: https://sourceforge.net/p/djvu/djvulibre-git/ci/05d00e831a5c55af2d407a513a9157a03449dc2c/"]},"tags":{},"packages":[{"name":"djvulibre","source":"https://ubuntu.com/security/cve?package=djvulibre","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=djvulibre","debian":"https://tracker.debian.org/pkg/djvulibre","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"3.5.27.1-14ubuntu0.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"3.5.28-2.2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"3.5.28-2ubuntu0.22.04.2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"3.5.28-2ubuntu0.24.04.2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"3.5.28-2.2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.5.27.1-8ubuntu0.4+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"3.5.27.1-5ubuntu0.1+esm3","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-8054-1"],"notices":[{"id":"USN-8054-1","title":"DjVuLibre vulnerabilities","summary":"Several security issues were fixed in DjVuLibre.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-23T12:38:54.719061","description":"It was discovered that DjVuLibre could be forced to execute a division\nby zero in certain instances. A remote attacker could possibly use\nthis issue to cause applications to stop responding or crash, resulting\nin a denial of service. (CVE-2021-46312)\n\nIt was discovered that DjVuLibre incorrectly handled certain memory\noperations. If a user or automated system were tricked into processing a\nspecially crafted DjVu file, a remote attacker could cause applications\nto stop responding or crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-53367)","is_hidden":false,"release_packages":{"bionic":[{"name":"djvulibre","version":"3.5.27.1-8ubuntu0.4+esm1","description":"DjVu image format library and tools","is_source":true},{"name":"djview","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djview3","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvulibre-bin","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvulibre-desktop","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvuserve","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre-dev","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre-text","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre21","version":"3.5.27.1-8ubuntu0.4+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"djvulibre","version":"3.5.27.1-14ubuntu0.1+esm1","description":"DjVu image format library and tools","is_source":true},{"name":"djview","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djview3","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvulibre-bin","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvulibre-desktop","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvuserve","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre-dev","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre-text","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre21","version":"3.5.27.1-14ubuntu0.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"djvulibre","version":"3.5.28-2ubuntu0.22.04.2","description":"DjVu image format library and tools","is_source":true},{"name":"djview","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"djview3","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"djvulibre-bin","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"djvulibre-desktop","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"djvuserve","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"libdjvulibre-dev","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"libdjvulibre-text","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"},{"name":"libdjvulibre21","version":"3.5.28-2ubuntu0.22.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.22.04.2","pocket":"security"}],"noble":[{"name":"djvulibre","version":"3.5.28-2ubuntu0.24.04.2","description":"DjVu image format library and tools","is_source":true},{"name":"djview","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"djview3","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"djvulibre-bin","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"djvulibre-desktop","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"djvuserve","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"libdjvulibre-dev","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"libdjvulibre-text","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"},{"name":"libdjvulibre21","version":"3.5.28-2ubuntu0.24.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":"https://launchpad.net/ubuntu/+source/djvulibre/3.5.28-2ubuntu0.24.04.2","pocket":"security"}],"xenial":[{"name":"djvulibre","version":"3.5.27.1-5ubuntu0.1+esm3","description":"DjVu image format library and tools","is_source":true},{"name":"djview","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djview3","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvulibre-bin","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvulibre-desktop","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"djvuserve","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre-dev","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre-text","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"},{"name":"libdjvulibre21","version":"3.5.27.1-5ubuntu0.1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/djvulibre","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2021-46312","CVE-2025-53367"]}]},{"id":"CVE-2021-46310","published":"2023-08-22T19:16:00","updated_at":"2025-07-08T16:55:07.659262+00:00","description":"\nAn issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows\nattackers to cause a denial of service via divide by zero.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nOnly a crash in an image parser"}],"codename":null,"priority":"low","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2021-46310"],"bugs":["https://sourceforge.net/p/djvu/bugs/345/"],"patches":{"djvulibre":["upstream: https://sourceforge.net/p/djvu/djvulibre-git/ci/cd8b5c97b27a5c1dc83046498b6ca49ad20aa9b6/"]},"tags":{},"packages":[{"name":"djvulibre","source":"https://ubuntu.com/security/cve?package=djvulibre","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=djvulibre","debian":"https://tracker.debian.org/pkg/djvulibre","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.5.28-2build2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.5.28-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"3.5.28-2build4","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"3.5.28-2build4","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"3.5.28-2build4","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"3.5.28-2.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"fix already present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"fix already present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"fix already present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46179","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:48:55.844441+00:00","description":"\nReachable Assertion vulnerability in upx before 4.0.0 allows attackers to\ncause a denial of service via crafted file passed to the the readx\nfunction.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/upx/upx/issues/545","https://www.cve.org/CVERecord?id=CVE-2021-46179"],"bugs":[""],"patches":{"upx-ucl":[]},"tags":{},"packages":[{"name":"upx-ucl","source":"https://ubuntu.com/security/cve?package=upx-ucl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=upx-ucl","debian":"https://tracker.debian.org/pkg/upx-ucl","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46174","published":"2023-08-22T19:16:00","updated_at":"2025-08-25T23:43:28.003781+00:00","description":"\nHeap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"binutils isn't safe for untrusted inputs."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://sourceware.org/bugzilla/show_bug.cgi?id=28753","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cad4d6b91e97b6962807d33c04ed7e7797788438","https://ubuntu.com/security/notices/USN-6381-1","https://ubuntu.com/security/notices/USN-6544-1","https://www.cve.org/CVERecord?id=CVE-2021-46174"],"bugs":[""],"patches":{"binutils":["upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cad4d6b91e97b6962807d33c04ed7e7797788438"]},"tags":{},"packages":[{"name":"binutils","source":"https://ubuntu.com/security/cve?package=binutils","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=binutils","debian":"https://tracker.debian.org/pkg/binutils","statuses":[{"release_codename":"jammy","status":"not-affected","description":"2.38-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.40-2ubuntu4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.38","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.30-21ubuntu1~18.04.9+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"trusty","status":"released","description":"2.24-5ubuntu14.2+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2.26.1-1ubuntu1~16.04.8+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"mantic","status":"not-affected","description":"2.41-4ubuntu1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.34-6ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-6381-1","USN-6544-1"],"notices":[{"id":"USN-6381-1","title":"GNU binutils vulnerabilities","summary":"Several security issues were fixed in GNU binutils.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-09-18T18:52:10.069063","description":"It was discovered that a memory leak existed in certain GNU binutils\nmodules. An attacker could possibly use this issue to cause a denial of\nservice (memory exhaustion). (CVE-2020-19724, CVE-2020-21490)\n\nIt was discovered that GNU binutils was not properly performing bounds\nchecks in several functions, which could lead to a buffer overflow. An\nattacker could possibly use this issue to cause a denial of service,\nexpose sensitive information or execute arbitrary code.\n(CVE-2020-19726, CVE-2021-46174, CVE-2022-45703)\n\nIt was discovered that GNU binutils was not properly initializing heap\nmemory when processing certain print instructions. An attacker could\npossibly use this issue to expose sensitive information. (CVE-2020-35342)\n\nIt was discovered that GNU binutils was not properly handling the logic\nbehind certain memory management related operations, which could lead to a\nbuffer overflow. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. (CVE-2022-44840)\n\nIt was discovered that GNU binutils was not properly handling the logic\nbehind certain memory management related operations, which could lead to\nan invalid memory access. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2022-47695)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"binutils","version":"2.30-21ubuntu1~18.04.9+esm1","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-aarch64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-alpha-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-arm-linux-gnueabi","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-arm-linux-gnueabihf","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-common","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-dev","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-doc","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-for-build","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-for-host","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-hppa-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-hppa64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-i686-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-i686-kfreebsd-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-i686-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-ia64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-m68k-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64-linux-gnuabi64","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64-linux-gnuabin32","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64el-linux-gnuabi64","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64el-linux-gnuabin32","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsel-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsisa32r6-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsisa32r6el-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsisa64r6-linux-gnuabi64","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsisa64r6-linux-gnuabin32","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsisa64r6el-linux-gnuabi64","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsisa64r6el-linux-gnuabin32","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch-dev","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc-linux-gnuspe","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc64le-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-riscv64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-s390x-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-sh4-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-source","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-sparc64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-x86-64-kfreebsd-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-x86-64-linux-gnu","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-x86-64-linux-gnux32","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"libbinutils","version":"2.30-21ubuntu1~18.04.9+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"}],"trusty":[{"name":"binutils","version":"2.24-5ubuntu14.2+esm3","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-dev","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-doc","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch-dev","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-source","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-static","version":"2.24-5ubuntu14.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"binutils","version":"2.26.1-1ubuntu1~16.04.8+esm7","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-aarch64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-alpha-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-arm-linux-gnueabi","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-arm-linux-gnueabihf","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-dev","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-doc","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-hppa-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-hppa64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-m68k-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64-linux-gnuabi64","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mips64el-linux-gnuabi64","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-mipsel-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch-dev","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc-linux-gnuspe","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-powerpc64le-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-s390x-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-sh4-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-source","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-sparc64-linux-gnu","version":"2.26.1-1ubuntu1~16.04.8+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2020-19726","CVE-2020-35342","CVE-2022-44840","CVE-2020-21490","CVE-2022-45703","CVE-2021-46174","CVE-2020-19724","CVE-2022-47695"]},{"id":"USN-6544-1","title":"GNU binutils vulnerabilities","summary":"Several security issues were fixed in GNU binutils.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-11T11:18:13.317090","description":"It was discovered that GNU binutils incorrectly handled certain COFF files.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533)\n\nIt was discovered that GNU binutils was not properly performing bounds\nchecks in several functions, which could lead to a buffer overflow. An\nattacker could possibly use this issue to cause a denial of service,\nexpose sensitive information or execute arbitrary code. This issue only\naffected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. \n(CVE-2022-4285, CVE-2020-19726, CVE-2021-46174)\n\nIt was discovered that GNU binutils contained a reachable assertion, which\ncould lead to an intentional assertion failure when processing certain\ncrafted DWARF files. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 20.04 LTS \nand Ubuntu 22.04 LTS. (CVE-2022-35205)\n","is_hidden":false,"release_packages":{"focal":[{"name":"binutils","version":"2.34-6ubuntu1.7","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-aarch64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-alpha-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-arm-linux-gnueabi","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-arm-linux-gnueabihf","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-common","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-dev","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-doc","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-for-build","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-for-host","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-hppa-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-hppa64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-i686-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-i686-kfreebsd-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-i686-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-ia64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-m68k-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-multiarch","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-multiarch-dev","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-powerpc-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-powerpc64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-powerpc64le-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-riscv64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-s390x-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-sh4-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-source","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-sparc64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-x86-64-kfreebsd-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-x86-64-linux-gnu","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"binutils-x86-64-linux-gnux32","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"libbinutils","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"libctf-nobfd0","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"},{"name":"libctf0","version":"2.34-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7","pocket":"security"}],"jammy":[{"name":"binutils","version":"2.38-4ubuntu2.4","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-aarch64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-alpha-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-arm-linux-gnueabi","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-arm-linux-gnueabihf","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-common","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-dev","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-doc","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-for-build","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-for-host","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-hppa-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-hppa64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-i686-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-i686-kfreebsd-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-i686-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-ia64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-m68k-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-multiarch","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-multiarch-dev","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-powerpc-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-powerpc64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-powerpc64le-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-riscv64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-s390x-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-sh4-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-source","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-sparc64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-x86-64-kfreebsd-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-x86-64-linux-gnu","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"binutils-x86-64-linux-gnux32","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"libbinutils","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"libctf-nobfd0","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"},{"name":"libctf0","version":"2.38-4ubuntu2.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":"https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4","pocket":"security"}],"trusty":[{"name":"binutils","version":"2.24-5ubuntu14.2+esm6","description":"GNU assembler, linker and binary utilities","is_source":true},{"name":"binutils","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-dev","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-doc","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-multiarch-dev","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-source","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"},{"name":"binutils-static","version":"2.24-5ubuntu14.2+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/binutils","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-35205","CVE-2020-19726","CVE-2021-46174","CVE-2022-38533","CVE-2022-4285"]}]},{"id":"CVE-2021-40266","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:48:12.318391+00:00","description":"\nFreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is\nvulnerabile to null pointer dereference.","ubuntu_description":"","notes":[{"author":"juliaphoebe","note":"Patch code not available upstream as of 2025-01-16"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://sourceforge.net/p/freeimage/bugs/334/","https://www.cve.org/CVERecord?id=CVE-2021-40266"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055305"],"patches":{"freeimage":[]},"tags":{},"packages":[{"name":"freeimage","source":"https://ubuntu.com/security/cve?package=freeimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeimage","debian":"https://tracker.debian.org/pkg/freeimage","statuses":[{"release_codename":"xenial","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-40265","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:48:12.318391+00:00","description":"\nA heap overflow bug exists FreeImage before 1.18.0 via ofLoad function in\nPluginJPEG.cpp.","ubuntu_description":"","notes":[{"author":"juliaphoebe","note":"Patch code unavailable upstream as of 2025-01-16"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://sourceforge.net/p/freeimage/bugs/337/","https://www.cve.org/CVERecord?id=CVE-2021-40265"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055304"],"patches":{"freeimage":[]},"tags":{},"packages":[{"name":"freeimage","source":"https://ubuntu.com/security/cve?package=freeimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeimage","debian":"https://tracker.debian.org/pkg/freeimage","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was deferred [2025-1-15]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred [2025-1-15]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"2025-1-15","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred [2025-1-15]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-40264","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:48:12.318391+00:00","description":"\nNULL pointer dereference vulnerability in FreeImage before 1.18.0 via the\nFreeImage_CloneTag function inFreeImageTag.cpp.","ubuntu_description":"","notes":[{"author":"juliaphoebe","note":"Patch code not available upstream as of 2025-01-16"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://sourceforge.net/p/freeimage/bugs/335/","https://www.cve.org/CVERecord?id=CVE-2021-40264"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055303"],"patches":{"freeimage":[]},"tags":{},"packages":[{"name":"freeimage","source":"https://ubuntu.com/security/cve?package=freeimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeimage","debian":"https://tracker.debian.org/pkg/freeimage","statuses":[{"release_codename":"xenial","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-40263","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:48:10.419812+00:00","description":"\nA heap overflow vulnerability in FreeImage 1.18.0 via the ofLoad function\nin PluginTIFF.cpp.","ubuntu_description":"","notes":[{"author":"juliaphoebe","note":"Patch code not available upstream as of 2025-01-16"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://sourceforge.net/p/freeimage/bugs/336/","https://www.cve.org/CVERecord?id=CVE-2021-40263"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055302"],"patches":{"freeimage":[]},"tags":{},"packages":[{"name":"freeimage","source":"https://ubuntu.com/security/cve?package=freeimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeimage","debian":"https://tracker.debian.org/pkg/freeimage","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-40262","published":"2023-08-22T19:16:00","updated_at":"2025-07-11T07:48:10.419812+00:00","description":"\nA stack exhaustion issue was discovered in FreeImage before 1.18.0 via the\nValidate function in PluginRAW.cpp.","ubuntu_description":"","notes":[{"author":"juliaphoebe","note":"Patch code not available upstream as of 2025-01-16"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://sourceforge.net/p/freeimage/bugs/338/","https://www.cve.org/CVERecord?id=CVE-2021-40262"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055301"],"patches":{"freeimage":[]},"tags":{},"packages":[{"name":"freeimage","source":"https://ubuntu.com/security/cve?package=freeimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeimage","debian":"https://tracker.debian.org/pkg/freeimage","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred [2025-01-16]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"2025-01-16","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-40211","published":"2023-08-22T19:16:00","updated_at":"2025-08-18T17:16:48.796931+00:00","description":"\nAn issue was discovered with ImageMagick 7.1.0-4 via Division by zero in\nfunction ReadEnhMetaFile of coders/emf.c.","ubuntu_description":"","notes":[{"author":"iconstantin","note":"this CVE was addressed by the patch for CVE-2022-32545"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/ImageMagick/ImageMagick/issues/4097","https://www.cve.org/CVERecord?id=CVE-2021-40211"],"bugs":[""],"patches":{"imagemagick":[]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.14","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8:6.9.10.23+dfsg-2.1ubuntu11.9","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"lunar","status":"released","description":"8:6.9.11.60+dfsg-1.3ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.13+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.16+esm4","component":null,"pocket":"esm-infra"},{"release_codename":"mantic","status":"not-affected","description":"8:6.9.11.60+dfsg-1.6","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8:6.9.11.60+dfsg-1.6","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8:6.9.11.60+dfsg-1.6","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8:6.9.11.60+dfsg-1.6","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8:6.9.11.60+dfsg-1.6","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8:6.9.11.60+dfsg-1.6","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-34193","published":"2023-08-22T19:16:00","updated_at":"2025-08-25T23:37:31.967670+00:00","description":"\nStack overflow vulnerability in OpenSC smart card middleware before 0.23\nvia crafted responses to APDUs.","ubuntu_description":"","notes":[{"author":"octagalland","note":"According to the discussion at https://github.com/OpenSC/OpenSC/issues/2841,\nthis CVE is a duplicate of the following CVEs: CVE-2021-42778,\nCVE-2021-42779, CVE-2021-42780, CVE-2021-42781, and CVE-2021-42782."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28768","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29912","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30800","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27719","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32149","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30112","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31448","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31540","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28855","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28843","https://www.cve.org/CVERecord?id=CVE-2021-34193","https://github.com/OpenSC/OpenSC/issues/2841"],"bugs":[""],"patches":{"opensc":[]},"tags":{},"packages":[{"name":"opensc","source":"https://ubuntu.com/security/cve?package=opensc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opensc","debian":"https://tracker.debian.org/pkg/opensc","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"0.22.0-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.21.0-1+deb11u1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":33720,"limit":20,"total_results":79316}