{"cves":[{"id":"CVE-2020-14672","published":"2020-10-21T15:15:00","updated_at":"2025-08-18T17:11:45.674156+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Stored Procedure). Supported versions that are affected are 5.6.49\nand prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable\nvulnerability allows high privileged attacker with network access via\nmultiple protocols to compromise MySQL Server. Successful attacks of this\nvulnerability can result in unauthorized ability to cause a hang or\nfrequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base\nScore 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpuoct2020.html","https://ubuntu.com/security/notices/USN-4604-1","https://www.cve.org/CVERecord?id=CVE-2020-14672"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"released","description":"5.7.32-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.7.32","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.32-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.22-0ubuntu0.20.04.2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.22","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.22-0ubuntu0.20.10.2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4604-1"],"notices":[{"id":"USN-4604-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2020-10-27T10:46:47.559076","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.22 in Ubuntu 20.04 LTS and Ubuntu 20.10.\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.32.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-32.html\n\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-22.html\n\nhttps://www.oracle.com/security-alerts/cpuoct2020.html\n","is_hidden":false,"release_packages":{"bionic":[{"name":"mysql-5.7","version":"5.7.32-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.32-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.18.04.1","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.22-0ubuntu0.20.04.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-client","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-router","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-server","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.22-0ubuntu0.20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.04.2","pocket":"security"}],"groovy":[{"name":"mysql-8.0","version":"8.0.22-0ubuntu0.20.10.2","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-client","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-router","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-server","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.22-0ubuntu0.20.10.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.22-0ubuntu0.20.10.2","pocket":"security"}],"xenial":[{"name":"mysql-5.7","version":"5.7.32-0ubuntu0.16.04.1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-common","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.32-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.32-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-14771","CVE-2020-14793","CVE-2020-14836","CVE-2020-14893","CVE-2020-14852","CVE-2020-14775","CVE-2020-14829","CVE-2020-14790","CVE-2020-14839","CVE-2020-14853","CVE-2020-14760","CVE-2020-14867","CVE-2020-14861","CVE-2020-14794","CVE-2020-14812","CVE-2020-14866","CVE-2020-14870","CVE-2020-14869","CVE-2020-14846","CVE-2020-14776","CVE-2020-14848","CVE-2020-14860","CVE-2020-14809","CVE-2020-14777","CVE-2020-14765","CVE-2020-14845","CVE-2020-14838","CVE-2020-14868","CVE-2020-14873","CVE-2020-14791","CVE-2020-14830","CVE-2020-14888","CVE-2020-14786","CVE-2020-14837","CVE-2020-14821","CVE-2020-14844","CVE-2020-14828","CVE-2020-14672","CVE-2020-14891","CVE-2020-14789","CVE-2020-14785","CVE-2020-14827","CVE-2020-14804","CVE-2020-14769","CVE-2020-14878","CVE-2020-14814","CVE-2020-14773","CVE-2020-14800"]}]},{"id":"CVE-2020-25648","published":"2020-10-20T00:00:00","updated_at":"2025-08-25T23:24:09.526150+00:00","description":"\nA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in\nTLS 1.3. This flaw allows a remote attacker to send multiple CCS messages,\ncausing a denial of service for servers compiled with the NSS library. The\nhighest threat from this vulnerability is to system availability. This flaw\naffects NSS versions before 3.58.","ubuntu_description":"","notes":[{"author":"leosilva","note":"From SUSE and Rhel: This issue affects servers which are compiled against the NSS library.\nOther consumers of NSS like firefox etc are not\naffected by this flaw."},{"author":"eslerm","note":"CCS handling introduced after 3.28.4 with revision\nc3eba3a9483abede4c35fa92b5c950a35cd9b639 and others"}],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes","https://ubuntu.com/security/notices/USN-5410-1","https://www.cve.org/CVERecord?id=CVE-2020-25648"],"bugs":["https://bugzilla.mozilla.org/show_bug.cgi?id=1641480"],"patches":{"nss":["upstream: https://hg.mozilla.org/projects/nss/rev/57bbefa793232586d27cee83e74411171e128361"]},"tags":{},"packages":[{"name":"nss","source":"https://ubuntu.com/security/cve?package=nss","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nss","debian":"https://tracker.debian.org/pkg/nss","statuses":[{"release_codename":"hirsute","status":"not-affected","description":"3.61-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.61-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:3.35-2ubuntu2.14","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:3.49.1-1ubuntu1.7","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"3.61-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"3.61-1ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2:3.61-1, 3.58","component":null,"pocket":"security"}]}],"notices_ids":["USN-5410-1"],"notices":[{"id":"USN-5410-1","title":"NSS vulnerability","summary":"NSS could be made to stop responding if it received a specially crafted message.\n","instructions":"After a standard system update you need to restart any applications that\nuse NSS to make all the necessary changes.\n","references":[],"published":"2022-05-11T08:22:36.702315","description":"Lenny Wang discovered that NSS incorrectly handled certain\nmessages. A remote attacker could possibly use this issue to cause\nservers compiled with NSS to stop responding, resulting in a denial of service.\n","is_hidden":false,"release_packages":{"focal":[{"name":"nss","version":"2:3.49.1-1ubuntu1.7","description":"Network Security Service library","is_source":true},{"name":"libnss3-dev","version":"2:3.49.1-1ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nss","version_link":"https://launchpad.net/ubuntu/+source/nss/2:3.49.1-1ubuntu1.7","pocket":"security"},{"name":"libnss3","version":"2:3.49.1-1ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nss","version_link":"https://launchpad.net/ubuntu/+source/nss/2:3.49.1-1ubuntu1.7","pocket":"security"},{"name":"libnss3-tools","version":"2:3.49.1-1ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nss","version_link":"https://launchpad.net/ubuntu/+source/nss/2:3.49.1-1ubuntu1.7","pocket":"security"}],"bionic":[{"name":"nss","version":"2:3.35-2ubuntu2.14","description":"Network Security Service library","is_source":true},{"name":"libnss3-dev","version":"2:3.35-2ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nss","version_link":"https://launchpad.net/ubuntu/+source/nss/2:3.35-2ubuntu2.14","pocket":"security"},{"name":"libnss3","version":"2:3.35-2ubuntu2.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nss","version_link":"https://launchpad.net/ubuntu/+source/nss/2:3.35-2ubuntu2.14","pocket":"security"},{"name":"libnss3-tools","version":"2:3.35-2ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nss","version_link":"https://launchpad.net/ubuntu/+source/nss/2:3.35-2ubuntu2.14","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-25648"]}]},{"id":"CVE-2020-15999","published":"2020-10-20T00:00:00","updated_at":"2025-07-10T13:11:08.766414+00:00","description":"\nHeap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111\nallowed a remote attacker to potentially exploit heap corruption via a\ncrafted HTML page.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"The android package is in multiverse and not covered by ESM.\nMarking as ignored."}],"codename":null,"priority":"high","cvss3":9.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/project-zero/issues/detail?id=2103","https://ubuntu.com/security/notices/USN-4593-1","https://ubuntu.com/security/notices/USN-4593-2","https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html","https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/#CVE-2020-15999","https://www.cve.org/CVERecord?id=CVE-2020-15999","https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"bugs":["https://savannah.nongnu.org/bugs/?59308"],"patches":{"android":[],"chromium-browser":[],"firefox":[],"freetype":["upstream: https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a3bab162b2ae616074c8877a04556932998aeacd"],"godot":[],"graphicsmagick":[],"musescore":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-lts":[],"oxide-qt":[],"paraview":[],"qtbase-opensource-src":[],"qtbase-opensource-src-gles":[],"texlive-bin":[],"texmaker":[],"thunderbird":[]},"tags":{},"packages":[{"name":"android","source":"https://ubuntu.com/security/cve?package=android","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=android","debian":"https://tracker.debian.org/pkg/android","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"86.0.4240.111","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"86.0.4240.198-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"86.0.4240.198-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"focal was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"bionic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]},{"name":"freetype","source":"https://ubuntu.com/security/cve?package=freetype","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freetype","debian":"https://tracker.debian.org/pkg/freetype","statuses":[{"release_codename":"bionic","status":"released","description":"2.8.1-2ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.10.1-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.5.2-1ubuntu2.8+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"2.10.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.6.1-0.1ubuntu2.5","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"2.10.2+dfsg-3ubuntu1","component":null,"pocket":"security"}]},{"name":"godot","source":"https://ubuntu.com/security/cve?package=godot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=godot","debian":"https://tracker.debian.org/pkg/godot","statuses":[{"release_codename":"hirsute","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"}]},{"name":"graphicsmagick","source":"https://ubuntu.com/security/cve?package=graphicsmagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=graphicsmagick","debian":"https://tracker.debian.org/pkg/graphicsmagick","statuses":[{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"musescore","source":"https://ubuntu.com/security/cve?package=musescore","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=musescore","debian":"https://tracker.debian.org/pkg/musescore","statuses":[{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"focal","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"focal","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"paraview","source":"https://ubuntu.com/security/cve?package=paraview","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=paraview","debian":"https://tracker.debian.org/pkg/paraview","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]},{"name":"qtbase-opensource-src","source":"https://ubuntu.com/security/cve?package=qtbase-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtbase-opensource-src","debian":"https://tracker.debian.org/pkg/qtbase-opensource-src","statuses":[{"release_codename":"bionic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]},{"name":"qtbase-opensource-src-gles","source":"https://ubuntu.com/security/cve?package=qtbase-opensource-src-gles","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtbase-opensource-src-gles","debian":"https://tracker.debian.org/pkg/qtbase-opensource-src-gles","statuses":[{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]},{"name":"texlive-bin","source":"https://ubuntu.com/security/cve?package=texlive-bin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=texlive-bin","debian":"https://tracker.debian.org/pkg/texlive-bin","statuses":[{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]},{"name":"texmaker","source":"https://ubuntu.com/security/cve?package=texmaker","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=texmaker","debian":"https://tracker.debian.org/pkg/texmaker","statuses":[{"release_codename":"groovy","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not compiled","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"upstream","status":"released","description":"78.5","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system freetype","component":null,"pocket":"security"}]}],"notices_ids":["USN-4593-1","USN-4593-2"],"notices":[{"id":"USN-4593-1","title":"FreeType vulnerability","summary":"FreeType could be made to crash or run programs as your login if it\nopened a specially crafted file.\n","instructions":"After a standard system update you need to restart your session to make\nall the necessary changes.\n","references":[],"published":"2020-10-20T12:02:17.901831","description":"Sergei Glazunov discovered that FreeType did not correctly handle certain\nmalformed font files. If a user were tricked into using a specially crafted\nfont file, a remote attacker could cause FreeType to crash or possibly\nexecute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"freetype","version":"2.8.1-2ubuntu2.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"freetype2-demos","version":"2.8.1-2ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.8.1-2ubuntu2.1","pocket":"security"},{"name":"libfreetype6","version":"2.8.1-2ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.8.1-2ubuntu2.1","pocket":"security"},{"name":"libfreetype6-dev","version":"2.8.1-2ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.8.1-2ubuntu2.1","pocket":"security"},{"name":"libfreetype6-udeb","version":"2.8.1-2ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.8.1-2ubuntu2.1","pocket":"security"}],"focal":[{"name":"freetype","version":"2.10.1-2ubuntu0.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"freetype2-demos","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.10.1-2ubuntu0.1","pocket":"security"},{"name":"freetype2-doc","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.10.1-2ubuntu0.1","pocket":"security"},{"name":"libfreetype-dev","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.10.1-2ubuntu0.1","pocket":"security"},{"name":"libfreetype6","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.10.1-2ubuntu0.1","pocket":"security"},{"name":"libfreetype6-dev","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.10.1-2ubuntu0.1","pocket":"security"},{"name":"libfreetype6-udeb","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.10.1-2ubuntu0.1","pocket":"security"}],"xenial":[{"name":"freetype","version":"2.6.1-0.1ubuntu2.5","description":"FreeType 2 is a font engine library","is_source":true},{"name":"freetype2-demos","version":"2.6.1-0.1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.6.1-0.1ubuntu2.5","pocket":"security"},{"name":"libfreetype6","version":"2.6.1-0.1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.6.1-0.1ubuntu2.5","pocket":"security"},{"name":"libfreetype6-dev","version":"2.6.1-0.1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.6.1-0.1ubuntu2.5","pocket":"security"},{"name":"libfreetype6-udeb","version":"2.6.1-0.1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.6.1-0.1ubuntu2.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-15999"]},{"id":"USN-4593-2","title":"FreeType vulnerability","summary":"FreeType could be made to crash or run programs as your login if it\nopened a specially crafted file.\n","instructions":"After a standard system update you need to restart your session to make\nall the necessary changes.\n","references":[],"published":"2020-10-22T14:48:01.180239","description":"USN-4593-1 fixed a vulnerability in FreeType. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Sergei Glazunov discovered that FreeType did not correctly handle certain\n malformed font files. If a user were tricked into using a specially crafted\n font file, a remote attacker could cause FreeType to crash or possibly\n execute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freetype","version":"2.5.2-1ubuntu2.8+esm2","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6-dev","version":"2.5.2-1ubuntu2.8+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.5.2-1ubuntu2.8+esm2"},{"name":"libfreetype6-udeb","version":"2.5.2-1ubuntu2.8+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.5.2-1ubuntu2.8+esm2"},{"name":"freetype2-demos","version":"2.5.2-1ubuntu2.8+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.5.2-1ubuntu2.8+esm2"},{"name":"libfreetype6","version":"2.5.2-1ubuntu2.8+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.5.2-1ubuntu2.8+esm2"}]},"type":"USN","cves_ids":["CVE-2020-15999"]}]},{"id":"CVE-2020-15256","published":"2020-10-19T22:15:00","updated_at":"2025-08-25T23:21:03.253671+00:00","description":"\nA prototype pollution vulnerability has been found in `object-path` <=\n0.11.4 affecting the `set()` method. The vulnerability is limited to the\n`includeInheritedProps` mode (if version >= 0.11.0 is used), which has to\nbe explicitly enabled by creating a new instance of `object-path` and\nsetting the option `includeInheritedProps: true`, or by using the default\n`withInheritedProps` instance. The default operating mode is not affected\nby the vulnerability if version >= 0.11.0 is used. Any usage of `set()` in\nversions < 0.11.0 is vulnerable. The issue is fixed in object-path version\n0.11.5 As a workaround, don't use the `includeInheritedProps: true` options\nor the `withInheritedProps` instance if using a version >= 0.11.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/mariocasciaro/object-path/security/advisories/GHSA-cwx2-736x-mf6w","https://github.com/mariocasciaro/object-path/commit/2be3354c6c46215c7635eb1b76d80f1319403c68","https://ubuntu.com/security/notices/USN-5967-1","https://www.cve.org/CVERecord?id=CVE-2020-15256"],"bugs":[""],"patches":{"node-object-path":[]},"tags":{},"packages":[{"name":"node-object-path","source":"https://ubuntu.com/security/cve?package=node-object-path","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-object-path","debian":"https://tracker.debian.org/pkg/node-object-path","statuses":[{"release_codename":"hirsute","status":"not-affected","description":"0.11.5-3","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"0.11.5-3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.11.3-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"0.11.4-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"0.11.5-3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"0.11.5-3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"0.11.5-3","component":null,"pocket":"security"}]}],"notices_ids":["USN-5967-1"],"notices":[{"id":"USN-5967-1","title":"object-path vulnerabilities","summary":"Several security issues were fixed in object-path.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-03-22T00:07:34.348999","description":"It was discovered that the set() method in object-path could be corrupted\nas a result of prototype pollution by sending a message to the parent\nprocess. An attacker could use this issue to cause object-path to crash.\n(CVE-2020-15256, CVE-2021-23434, CVE-2021-3805)\n","is_hidden":false,"release_packages":{"focal":[{"name":"node-object-path","version":"0.11.4-2ubuntu0.1","description":"Access deep object properties using a path","is_source":true},{"name":"node-object-path","version":"0.11.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/node-object-path","version_link":"https://launchpad.net/ubuntu/+source/node-object-path/0.11.4-2ubuntu0.1","pocket":"security"}],"bionic":[{"name":"node-object-path","version":"0.11.3-1ubuntu0.1","description":"Access deep object properties using a path","is_source":true},{"name":"node-object-path","version":"0.11.3-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/node-object-path","version_link":"https://launchpad.net/ubuntu/+source/node-object-path/0.11.3-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-3805","CVE-2020-15256","CVE-2021-23434"]}]},{"id":"CVE-2020-26891","published":"2020-10-19T17:15:00","updated_at":"2025-08-26T12:23:08.611515+00:00","description":"\nAuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to\nunsafe interpolation of the session GET parameter. This allows a remote\nattacker to execute an XSS attack on the domain Synapse is hosted on, by\nsupplying the victim user with a malicious URL to the\n/_matrix/client/r0/auth/*/fallback/web or\n/_matrix/client/unstable/auth/*/fallback/web Synapse endpoints.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/matrix-org/synapse/pull/8444","https://github.com/matrix-org/synapse/releases","https://matrix.org/blog/2020/10/15/synapse-1-21-2-released-and-security-advisory","https://www.cve.org/CVERecord?id=CVE-2020-26891"],"bugs":[""],"patches":{"matrix-synapse":[]},"tags":{},"packages":[{"name":"matrix-synapse","source":"https://ubuntu.com/security/cve?package=matrix-synapse","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=matrix-synapse","debian":"https://tracker.debian.org/pkg/matrix-synapse","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.21.1-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.64.0-3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.64.0-3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.64.0-3","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.64.0-3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-24266","published":"2020-10-19T15:15:00","updated_at":"2025-08-25T23:23:47.395758+00:00","description":"\nAn issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer\noverflow vulnerability in get_l2len() that can make tcpprep crash and cause\na denial of service.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/appneta/tcpreplay/issues/617","https://ubuntu.com/security/notices/USN-5205-1","https://www.cve.org/CVERecord?id=CVE-2020-24266"],"bugs":[""],"patches":{"tcpreplay":["upstream: https://github.com/appneta/tcpreplay/commit/8323a7fe1e47d562ebf384aa99633e3df74a01c4"]},"tags":{},"packages":[{"name":"tcpreplay","source":"https://ubuntu.com/security/cve?package=tcpreplay","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tcpreplay","debian":"https://tracker.debian.org/pkg/tcpreplay","statuses":[{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.3.4","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"4.2.6-1ubuntu0.1~esm3","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"4.3.2-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]}],"notices_ids":["USN-5205-1"],"notices":[{"id":"USN-5205-1","title":"Tcpreplay vulnerabilities","summary":"Several security issues were fixed in Tcpreplay.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-10-04T11:15:02.361843","description":"It was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcpprep. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 18.04 ESM. (CVE-2018-13112)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a denial\nof service or expose sensitive information. This issue only affected\nUbuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-17580, CVE-2018-17582)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.\n(CVE-2018-17974, CVE-2018-18407)\n\nIt was discovered that a use-after-free existed in Tcpreplay in the tcpbridge\nbinary. An attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-18408)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM\nand Ubuntu 20.04 ESM. (CVE-2018-20552, CVE-2018-20553)\n\nIt was discovered that a heap-based buffer over-read that existed in Tcpreplay\ncaused an application crash when tcprewrite or tcpreplay-edit received specially\ncrafted packet capture input. An attacker could possibly use this to cause a\ndenial of service or to expose sensitive information. This issue only affected\nUbuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-12740)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcpprep. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-24265, CVE-2020-24266)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcprewrite. An attacker could possibly\nuse this issue to cause a denial of service. This issue only affected Ubuntu\n22.04 ESM. (CVE-2022-27416)\n\nIt was discovered that Tcpreplay did not properly manage memory under certain\ncircumstances. If a user were tricked into opening a specially crafted packet\ncapture file, a remote attacker could possibly use this issue to cause\nTcpreplay crash, resulting in a denial of service, or possibly read sensitive\ndata. This issue only affected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM and Ubuntu\n22.04 ESM. (CVE-2022-28487)\n","is_hidden":false,"release_packages":{"jammy":[{"name":"tcpreplay","version":"4.3.4-1ubuntu0.1~esm1","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"4.3.4-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"tcpreplay","version":"4.3.2-1ubuntu0.1~esm2","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"4.3.2-1ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}],"bionic":[{"name":"tcpreplay","version":"4.2.6-1ubuntu0.1~esm4","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"4.2.6-1ubuntu0.1~esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"tcpreplay","version":"3.4.4-2+deb8u1ubuntu0.1~esm2","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"3.4.4-2+deb8u1ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-27416","CVE-2022-28487","CVE-2018-17580","CVE-2018-17974","CVE-2020-24266","CVE-2020-12740","CVE-2018-18407","CVE-2018-20553","CVE-2018-18408","CVE-2018-13112","CVE-2020-24265","CVE-2018-17582","CVE-2018-20552"]}]},{"id":"CVE-2020-24265","published":"2020-10-19T15:15:00","updated_at":"2025-08-25T23:23:47.395758+00:00","description":"\nAn issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer\noverflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep\ncrash and cause a denial of service.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/appneta/tcpreplay/issues/616","https://ubuntu.com/security/notices/USN-5205-1","https://www.cve.org/CVERecord?id=CVE-2020-24265"],"bugs":[""],"patches":{"tcpreplay":["upstream: https://github.com/appneta/tcpreplay/commit/8323a7fe1e47d562ebf384aa99633e3df74a01c4"]},"tags":{},"packages":[{"name":"tcpreplay","source":"https://ubuntu.com/security/cve?package=tcpreplay","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tcpreplay","debian":"https://tracker.debian.org/pkg/tcpreplay","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.3.4","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"4.2.6-1ubuntu0.1~esm3","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"4.3.2-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]}],"notices_ids":["USN-5205-1"],"notices":[{"id":"USN-5205-1","title":"Tcpreplay vulnerabilities","summary":"Several security issues were fixed in Tcpreplay.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-10-04T11:15:02.361843","description":"It was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcpprep. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 18.04 ESM. (CVE-2018-13112)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a denial\nof service or expose sensitive information. This issue only affected\nUbuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-17580, CVE-2018-17582)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a denial\nof service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.\n(CVE-2018-17974, CVE-2018-18407)\n\nIt was discovered that a use-after-free existed in Tcpreplay in the tcpbridge\nbinary. An attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-18408)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input. An attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 ESM\nand Ubuntu 20.04 ESM. (CVE-2018-20552, CVE-2018-20553)\n\nIt was discovered that a heap-based buffer over-read that existed in Tcpreplay\ncaused an application crash when tcprewrite or tcpreplay-edit received specially\ncrafted packet capture input. An attacker could possibly use this to cause a\ndenial of service or to expose sensitive information. This issue only affected\nUbuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-12740)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcpprep. An attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 18.04 ESM and Ubuntu 20.04 ESM. (CVE-2020-24265, CVE-2020-24266)\n\nIt was discovered that Tcpreplay incorrectly handled certain specially crafted\npacket capture input when processed by tcprewrite. An attacker could possibly\nuse this issue to cause a denial of service. This issue only affected Ubuntu\n22.04 ESM. (CVE-2022-27416)\n\nIt was discovered that Tcpreplay did not properly manage memory under certain\ncircumstances. If a user were tricked into opening a specially crafted packet\ncapture file, a remote attacker could possibly use this issue to cause\nTcpreplay crash, resulting in a denial of service, or possibly read sensitive\ndata. This issue only affected Ubuntu 18.04 ESM, Ubuntu 20.04 ESM and Ubuntu\n22.04 ESM. (CVE-2022-28487)\n","is_hidden":false,"release_packages":{"jammy":[{"name":"tcpreplay","version":"4.3.4-1ubuntu0.1~esm1","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"4.3.4-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"tcpreplay","version":"4.3.2-1ubuntu0.1~esm2","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"4.3.2-1ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}],"bionic":[{"name":"tcpreplay","version":"4.2.6-1ubuntu0.1~esm4","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"4.2.6-1ubuntu0.1~esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"tcpreplay","version":"3.4.4-2+deb8u1ubuntu0.1~esm2","description":"Tool to replay saved tcpdump files at arbitrary speeds","is_source":true},{"name":"tcpreplay","version":"3.4.4-2+deb8u1ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tcpreplay","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-27416","CVE-2022-28487","CVE-2018-17580","CVE-2018-17974","CVE-2020-24266","CVE-2020-12740","CVE-2018-18407","CVE-2018-20553","CVE-2018-18408","CVE-2018-13112","CVE-2020-24265","CVE-2018-17582","CVE-2018-20552"]}]},{"id":"CVE-2020-27194","published":"2020-10-16T21:15:00","updated_at":"2026-07-04T07:48:41.002797+00:00","description":"\nAn issue was discovered in the Linux kernel before 5.8.15.\nscalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking\nduring use of 64-bit values, aka CID-5b9fbeb75b6a.","ubuntu_description":"\nSimon Scannell discovered that the bpf verifier in the Linux kernel did not\nproperly calculate register bounds for certain operations. A local attacker\ncould use this to expose sensitive information (kernel memory) or gain\nadministrative privileges.","notes":[],"codename":null,"priority":"high","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://git.kernel.org/linus/5b9fbeb75b6a98955f628e205ac26689bcb1383e","https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.15","https://github.com/torvalds/linux/commit/5b9fbeb75b6a98955f628e205ac26689bcb1383e","https://scannell.me/fuzzing-for-ebpf-jit-bugs-in-the-linux-kernel/","https://ubuntu.com/security/notices/USN-4626-1","https://www.cve.org/CVERecord?id=CVE-2020-27194"],"bugs":[""],"patches":{"linux":["break-fix: 3f50f132d8400e129fc9eb68b5020167ef80a244 5b9fbeb75b6a98955f628e205ac26689bcb1383e"],"linux-hwe":[],"linux-hwe-5.4":[],"linux-hwe-edge":[],"linux-lts-trusty":[],"linux-lts-xenial":[],"linux-kvm":[],"linux-aws":[],"linux-aws-5.0":[],"linux-aws-5.3":[],"linux-aws-5.4":[],"linux-aws-hwe":[],"linux-azure":[],"linux-azure-4.15":[],"linux-azure-5.3":[],"linux-azure-5.4":[],"linux-azure-edge":[],"linux-gcp":[],"linux-gcp-4.15":[],"linux-gcp-5.3":[],"linux-gcp-5.4":[],"linux-gcp-edge":[],"linux-gke-4.15":[],"linux-gke-5.0":[],"linux-gke-5.3":[],"linux-oracle":[],"linux-oracle-5.0":[],"linux-oracle-5.3":[],"linux-oracle-5.4":[],"linux-oem":[],"linux-oem-5.6":[],"linux-oem-osp1":[],"linux-raspi":[],"linux-raspi2":[],"linux-raspi2-5.3":[],"linux-raspi-5.4":[],"linux-riscv":[],"linux-snapdragon":[]},"tags":{"linux":["binary-exclude:linux-libc-dev"]},"packages":[{"name":"linux","source":"https://ubuntu.com/security/cve?package=linux","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux","debian":"https://tracker.debian.org/pkg/linux","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.13.0-16.19","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-9.12","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-28.30","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.2.0-16.19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-aws","source":"https://ubuntu.com/security/cve?package=linux-aws","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws","debian":"https://tracker.debian.org/pkg/linux-aws","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1001.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1005.5","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-1013.14","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1001.10","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-aws-5.0","source":"https://ubuntu.com/security/cve?package=linux-aws-5.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.0","debian":"https://tracker.debian.org/pkg/linux-aws-5.0","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-aws-5.3","source":"https://ubuntu.com/security/cve?package=linux-aws-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.3","debian":"https://tracker.debian.org/pkg/linux-aws-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-aws-5.4","source":"https://ubuntu.com/security/cve?package=linux-aws-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.4","debian":"https://tracker.debian.org/pkg/linux-aws-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1018.18~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws-hwe","source":"https://ubuntu.com/security/cve?package=linux-aws-hwe","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-hwe","debian":"https://tracker.debian.org/pkg/linux-aws-hwe","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.15.0-1030.31~16.04.1","component":null,"pocket":"security"}]},{"name":"linux-azure","source":"https://ubuntu.com/security/cve?package=linux-azure","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure","debian":"https://tracker.debian.org/pkg/linux-azure","statuses":[{"release_codename":"focal","status":"not-affected","description":"5.4.0-1006.6","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-1012.13","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.11.0-1009.9","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-azure-4.15","source":"https://ubuntu.com/security/cve?package=linux-azure-4.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-4.15","debian":"https://tracker.debian.org/pkg/linux-azure-4.15","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1082.92","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-5.3","source":"https://ubuntu.com/security/cve?package=linux-azure-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.3","debian":"https://tracker.debian.org/pkg/linux-azure-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-azure-5.4","source":"https://ubuntu.com/security/cve?package=linux-azure-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.4","debian":"https://tracker.debian.org/pkg/linux-azure-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1020.20~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-edge","source":"https://ubuntu.com/security/cve?package=linux-azure-edge","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-edge","debian":"https://tracker.debian.org/pkg/linux-azure-edge","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-gcp","source":"https://ubuntu.com/security/cve?package=linux-gcp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp","debian":"https://tracker.debian.org/pkg/linux-gcp","statuses":[{"release_codename":"focal","status":"not-affected","description":"5.4.0-1005.5","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-1011.11","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.10.0-1004.4","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-gcp-4.15","source":"https://ubuntu.com/security/cve?package=linux-gcp-4.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-4.15","debian":"https://tracker.debian.org/pkg/linux-gcp-4.15","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1071.81","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.3","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.3","debian":"https://tracker.debian.org/pkg/linux-gcp-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.4","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.4","debian":"https://tracker.debian.org/pkg/linux-gcp-5.4","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1019.19~18.04.2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-edge","source":"https://ubuntu.com/security/cve?package=linux-gcp-edge","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-edge","debian":"https://tracker.debian.org/pkg/linux-gcp-edge","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-gke-4.15","source":"https://ubuntu.com/security/cve?package=linux-gke-4.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-4.15","debian":"https://tracker.debian.org/pkg/linux-gke-4.15","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1030.32","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gke-5.0","source":"https://ubuntu.com/security/cve?package=linux-gke-5.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-5.0","debian":"https://tracker.debian.org/pkg/linux-gke-5.0","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.0.0-1011.11~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gke-5.3","source":"https://ubuntu.com/security/cve?package=linux-gke-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-5.3","debian":"https://tracker.debian.org/pkg/linux-gke-5.3","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.3.0-1011.12~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe","source":"https://ubuntu.com/security/cve?package=linux-hwe","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe","debian":"https://tracker.debian.org/pkg/linux-hwe","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.8.0-36.36~16.04.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.4","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.4","debian":"https://tracker.debian.org/pkg/linux-hwe-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-37.41~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-edge","source":"https://ubuntu.com/security/cve?package=linux-hwe-edge","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-edge","debian":"https://tracker.debian.org/pkg/linux-hwe-edge","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-kvm","source":"https://ubuntu.com/security/cve?package=linux-kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-kvm","debian":"https://tracker.debian.org/pkg/linux-kvm","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1002.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1004.4","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-1009.10","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1004.9","component":null,"pocket":"security"}]},{"name":"linux-lts-trusty","source":"https://ubuntu.com/security/cve?package=linux-lts-trusty","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-trusty","debian":"https://tracker.debian.org/pkg/linux-lts-trusty","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lts-xenial","source":"https://ubuntu.com/security/cve?package=linux-lts-xenial","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-xenial","debian":"https://tracker.debian.org/pkg/linux-lts-xenial","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-oem","source":"https://ubuntu.com/security/cve?package=linux-oem","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem","debian":"https://tracker.debian.org/pkg/linux-oem","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1002.3","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-oem-5.6","source":"https://ubuntu.com/security/cve?package=linux-oem-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-5.6","debian":"https://tracker.debian.org/pkg/linux-oem-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.6.0-1007.7","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem-osp1","source":"https://ubuntu.com/security/cve?package=linux-oem-osp1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-osp1","debian":"https://tracker.debian.org/pkg/linux-oem-osp1","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.0.0-1010.11","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oracle","source":"https://ubuntu.com/security/cve?package=linux-oracle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle","debian":"https://tracker.debian.org/pkg/linux-oracle","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1007.9","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1005.5","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-1010.10","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.15.0-1007.9~16.04.1","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.0","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.0","debian":"https://tracker.debian.org/pkg/linux-oracle-5.0","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.3","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.3","debian":"https://tracker.debian.org/pkg/linux-oracle-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.4","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.4","debian":"https://tracker.debian.org/pkg/linux-oracle-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1019.19~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-raspi","source":"https://ubuntu.com/security/cve?package=linux-raspi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi","debian":"https://tracker.debian.org/pkg/linux-raspi","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1007.7","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-1007.10","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-raspi-5.4","source":"https://ubuntu.com/security/cve?package=linux-raspi-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi-5.4","debian":"https://tracker.debian.org/pkg/linux-raspi-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1013.13~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-raspi2","source":"https://ubuntu.com/security/cve?package=linux-raspi2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi2","debian":"https://tracker.debian.org/pkg/linux-raspi2","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.13.0-1005.5","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.2.0-1013.19","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [replaced by linux-raspi]","component":null,"pocket":"security"}]},{"name":"linux-raspi2-5.3","source":"https://ubuntu.com/security/cve?package=linux-raspi2-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi2-5.3","debian":"https://tracker.debian.org/pkg/linux-raspi2-5.3","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.3.0-1017.19~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-riscv","source":"https://ubuntu.com/security/cve?package=linux-riscv","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv","debian":"https://tracker.debian.org/pkg/linux-riscv","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-24.28","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.8.0-8.9","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-snapdragon","source":"https://ubuntu.com/security/cve?package=linux-snapdragon","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-snapdragon","debian":"https://tracker.debian.org/pkg/linux-snapdragon","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.4.0-1077.82","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.9","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1013.15","component":null,"pocket":"security"}]}],"notices_ids":["USN-4626-1"],"notices":[{"id":"USN-4626-1","title":"Linux kernel vulnerabilities","summary":"Several security issues were fixed in the Linux kernel.\n","instructions":"After a standard system update you need to reboot your computer to make\nall the necessary changes.\n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed.\nUnless you manually uninstalled the standard kernel metapackages\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,\nlinux-powerpc), a standard system upgrade will automatically perform\nthis as well.\n","references":[],"published":"2020-11-11T00:31:49.351963","description":"Simon Scannell discovered that the bpf verifier in the Linux kernel did not\nproperly calculate register bounds for certain operations. A local attacker\ncould use this to expose sensitive information (kernel memory) or gain\nadministrative privileges. (CVE-2020-27194)\n\nMoritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine\nEasdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running\nAverage Power Limit (RAPL) driver in the Linux kernel did not properly\nrestrict access to power data. A local attacker could possibly use this to\nexpose sensitive information. (CVE-2020-8694)\n","is_hidden":false,"release_packages":{"groovy":[{"name":"linux","version":"5.8.0-28.30","description":"Linux kernel","is_source":true},{"name":"linux-aws","version":"5.8.0-1013.14","description":"Linux kernel for Amazon Web Services (AWS) systems","is_source":true},{"name":"linux-azure","version":"5.8.0-1012.13","description":"Linux kernel for Microsoft Azure Cloud systems","is_source":true},{"name":"linux-gcp","version":"5.8.0-1011.11","description":"Linux kernel for Google Cloud Platform (GCP) systems","is_source":true},{"name":"linux-kvm","version":"5.8.0-1009.10","description":"Linux kernel for cloud environments","is_source":true},{"name":"linux-oracle","version":"5.8.0-1010.10","description":"Linux kernel for Oracle Cloud systems","is_source":true},{"name":"linux-raspi","version":"5.8.0-1007.10","description":"Linux kernel for Raspberry Pi (V8) systems","is_source":true},{"name":"linux-image-5.8.0-1007-raspi","version":"5.8.0-1007.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-raspi","version_link":"https://launchpad.net/ubuntu/+source/linux-raspi/5.8.0-1007.10","pocket":"security"},{"name":"linux-image-5.8.0-1007-raspi-nolpae","version":"5.8.0-1007.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-raspi","version_link":"https://launchpad.net/ubuntu/+source/linux-raspi/5.8.0-1007.10","pocket":"security"},{"name":"linux-image-5.8.0-1009-kvm","version":"5.8.0-1009.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed-kvm","version_link":"https://launchpad.net/ubuntu/+source/linux-signed-kvm/5.8.0-1009.10","pocket":"security"},{"name":"linux-image-5.8.0-1010-oracle","version":"5.8.0-1010.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed-oracle","version_link":"https://launchpad.net/ubuntu/+source/linux-signed-oracle/5.8.0-1010.10","pocket":"security"},{"name":"linux-image-5.8.0-1011-gcp","version":"5.8.0-1011.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed-gcp","version_link":"https://launchpad.net/ubuntu/+source/linux-signed-gcp/5.8.0-1011.11","pocket":"security"},{"name":"linux-image-5.8.0-1012-azure","version":"5.8.0-1012.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed-azure","version_link":"https://launchpad.net/ubuntu/+source/linux-signed-azure/5.8.0-1012.13","pocket":"security"},{"name":"linux-image-5.8.0-1013-aws","version":"5.8.0-1013.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-aws","version_link":"https://launchpad.net/ubuntu/+source/linux-aws/5.8.0-1013.14","pocket":"security"},{"name":"linux-image-5.8.0-28-generic","version":"5.8.0-28.30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed","version_link":"https://launchpad.net/ubuntu/+source/linux-signed/5.8.0-28.30","pocket":"security"},{"name":"linux-image-5.8.0-28-generic-64k","version":"5.8.0-28.30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed","version_link":"https://launchpad.net/ubuntu/+source/linux-signed/5.8.0-28.30","pocket":"security"},{"name":"linux-image-5.8.0-28-generic-lpae","version":"5.8.0-28.30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/5.8.0-28.30","pocket":"security"},{"name":"linux-image-5.8.0-28-lowlatency","version":"5.8.0-28.30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-signed","version_link":"https://launchpad.net/ubuntu/+source/linux-signed/5.8.0-28.30","pocket":"security"},{"name":"linux-image-aws","version":"5.8.0.1013.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-aws","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-aws/5.8.0.1013.15","pocket":"security"},{"name":"linux-image-azure","version":"5.8.0.1012.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-azure","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-azure/5.8.0.1012.12","pocket":"security"},{"name":"linux-image-gcp","version":"5.8.0.1011.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-gcp","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.8.0.1011.11","pocket":"security"},{"name":"linux-image-generic","version":"5.8.0.28.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-64k","version":"5.8.0.28.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-64k-hwe-20.04","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-64k-hwe-20.04-edge","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-hwe-20.04","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-hwe-20.04-edge","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-lpae","version":"5.8.0.28.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-lpae-hwe-20.04","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-generic-lpae-hwe-20.04-edge","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-gke","version":"5.8.0.1011.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-gcp","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-gcp/5.8.0.1011.11","pocket":"security"},{"name":"linux-image-kvm","version":"5.8.0.1009.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-kvm","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-kvm/5.8.0.1009.10","pocket":"security"},{"name":"linux-image-lowlatency","version":"5.8.0.28.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-lowlatency-hwe-20.04","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-lowlatency-hwe-20.04-edge","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-oem-20.04","version":"5.8.0.28.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-oracle","version":"5.8.0.1010.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-oracle","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-oracle/5.8.0.1010.10","pocket":"security"},{"name":"linux-image-raspi","version":"5.8.0.1007.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-raspi","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.8.0.1007.10","pocket":"security"},{"name":"linux-image-raspi-nolpae","version":"5.8.0.1007.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta-raspi","version_link":"https://launchpad.net/ubuntu/+source/linux-meta-raspi/5.8.0.1007.10","pocket":"security"},{"name":"linux-image-virtual","version":"5.8.0.28.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-virtual-hwe-20.04","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"},{"name":"linux-image-virtual-hwe-20.04-edge","version":"5.8.0.28.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-meta","version_link":"https://launchpad.net/ubuntu/+source/linux-meta/5.8.0.28.33","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-8694","CVE-2020-27194"]}]},{"id":"CVE-2020-26682","published":"2020-10-16T14:15:00","updated_at":"2025-08-26T12:23:08.611515+00:00","description":"\nIn libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke`\ncauses a signed integer overflow.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/libass/libass/issues/431","https://github.com/libass/libass/pull/432","https://www.cve.org/CVERecord?id=CVE-2020-26682"],"bugs":[""],"patches":{"libass":["upstream: https://github.com/libass/libass/pull/432/commits/676f9dc5b52ef406c5527bdadbcb947f11392929"]},"tags":{},"packages":[{"name":"libass","source":"https://ubuntu.com/security/cve?package=libass","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libass","debian":"https://tracker.debian.org/pkg/libass","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1:0.15.0-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1:0.15.0-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.15.0","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1:0.15.2-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-25829","published":"2020-10-16T06:15:00","updated_at":"2025-08-26T12:22:52.515835+00:00","description":"\nAn issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before\n4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached\nrecords for a given name to be updated to the Bogus DNSSEC validation\nstate, instead of their actual DNSSEC Secure state, via a DNS ANY query.\nThis results in a denial of service for installation that always validate\n(dnssec=validate), and for clients requesting validation when on-demand\nvalidation is enabled (dnssec=process).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html","https://www.cve.org/CVERecord?id=CVE-2020-25829"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972159"],"patches":{"pdns-recursor":[]},"tags":{},"packages":[{"name":"pdns-recursor","source":"https://ubuntu.com/security/cve?package=pdns-recursor","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pdns-recursor","debian":"https://tracker.debian.org/pkg/pdns-recursor","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.3.5-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-24352","published":"2020-10-16T06:15:00","updated_at":"2026-08-21T15:03:42.038583+00:00","description":"\nAn issue was discovered in QEMU through 5.1.0. An out-of-bounds memory\naccess was found in the ATI VGA device implementation. This flaw occurs in\nthe ati_2d_blt() routine in hw/display/ati_2d.c while handling MMIO write\noperations through the ati_mm_write() callback. A malicious guest could use\nthis flaw to crash the QEMU process on the host, resulting in a denial of\nservice.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"introduced in qemu 4.0"}],"codename":null,"priority":"low","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://lists.gnu.org/archive/html/qemu-devel/2020-08/msg05483.html","https://lists.gnu.org/archive/html/qemu-devel/2020-08/msg05720.html","https://www.cve.org/CVERecord?id=CVE-2020-24352"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968820","https://bugzilla.redhat.com/show_bug.cgi?id=1847584"],"patches":{"qemu-kvm":[],"qemu":["upstream: https://gitlab.com/qemu-project/qemu/-/commit/ca1f9cbfdce4d63b10d57de80fef89a89d92a540"]},"tags":{},"packages":[{"name":"qemu","source":"https://ubuntu.com/security/cve?package=qemu","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu","debian":"https://tracker.debian.org/pkg/qemu","statuses":[{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1:8.2.2+ds-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was deferred [2026-06-01]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"}]},{"name":"qemu-kvm","source":"https://ubuntu.com/security/cve?package=qemu-kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu-kvm","debian":"https://tracker.debian.org/pkg/qemu-kvm","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-6108","published":"2020-10-15T15:15:00","updated_at":"2025-07-11T07:45:44.221882+00:00","description":"\nAn exploitable code execution vulnerability exists in the\nfsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A\nspecially crafted f2fs filesystem can cause a heap buffer overflow\nresulting in a code execution. An attacker can provide a malicious file to\ntrigger this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2020-1050","https://www.cve.org/CVERecord?id=CVE-2020-6108"],"bugs":[""],"patches":{"f2fs-tools":[]},"tags":{},"packages":[{"name":"f2fs-tools","source":"https://ubuntu.com/security/cve?package=f2fs-tools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=f2fs-tools","debian":"https://tracker.debian.org/pkg/f2fs-tools","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-6107","published":"2020-10-15T15:15:00","updated_at":"2025-07-11T07:45:44.221882+00:00","description":"\nAn exploitable information disclosure vulnerability exists in the dev_read\nfunctionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs\nfilesystem can cause an uninitialized read resulting in an information\ndisclosure. An attacker can provide a malicious file to trigger this\nvulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2020-1049","https://www.cve.org/CVERecord?id=CVE-2020-6107"],"bugs":[""],"patches":{"f2fs-tools":[]},"tags":{},"packages":[{"name":"f2fs-tools","source":"https://ubuntu.com/security/cve?package=f2fs-tools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=f2fs-tools","debian":"https://tracker.debian.org/pkg/f2fs-tools","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-6106","published":"2020-10-15T15:15:00","updated_at":"2025-07-11T07:45:44.221882+00:00","description":"\nAn exploitable information disclosure vulnerability exists in the\ninit_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A\nspecially crafted filesystem can be used to disclose information. An\nattacker can provide a malicious file to trigger this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2020-1048","https://www.cve.org/CVERecord?id=CVE-2020-6106"],"bugs":[""],"patches":{"f2fs-tools":[]},"tags":{},"packages":[{"name":"f2fs-tools","source":"https://ubuntu.com/security/cve?package=f2fs-tools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=f2fs-tools","debian":"https://tracker.debian.org/pkg/f2fs-tools","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-6105","published":"2020-10-15T15:15:00","updated_at":"2025-07-11T07:45:44.221882+00:00","description":"\nAn exploitable code execution vulnerability exists in the multiple devices\nfunctionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs\nfilesystem can cause Information overwrite resulting in a code execution.\nAn attacker can provide a malicious file to trigger this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2020-1047","https://www.cve.org/CVERecord?id=CVE-2020-6105"],"bugs":[""],"patches":{"f2fs-tools":[]},"tags":{},"packages":[{"name":"f2fs-tools","source":"https://ubuntu.com/security/cve?package=f2fs-tools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=f2fs-tools","debian":"https://tracker.debian.org/pkg/f2fs-tools","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-6104","published":"2020-10-15T15:15:00","updated_at":"2025-07-11T07:45:44.221882+00:00","description":"\nAn exploitable information disclosure vulnerability exists in the\nget_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially\ncrafted f2fs filesystem can cause information disclosure resulting in a\ninformation disclosure. An attacker can provide a malicious file to trigger\nthis vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2020-1046","https://www.cve.org/CVERecord?id=CVE-2020-6104"],"bugs":[""],"patches":{"f2fs-tools":[]},"tags":{},"packages":[{"name":"f2fs-tools","source":"https://ubuntu.com/security/cve?package=f2fs-tools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=f2fs-tools","debian":"https://tracker.debian.org/pkg/f2fs-tools","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-21674","published":"2020-10-15T15:15:00","updated_at":"2025-08-25T23:23:25.685361+00:00","description":"\nHeap-based buffer overflow in archive_string_append_from_wcs()\n(archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause\na denial of service (out-of-bounds write in heap memory resulting into a\ncrash) via a crafted archive file. NOTE: this only affects users who\ndownloaded the development code from GitHub. Users of the product's\nofficial releases are unaffected.","ubuntu_description":"","notes":[{"author":"ebarretto","note":"this only affects users who downloaded the development code.\nUsers of the product's official releases are unaffected."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/libarchive/libarchive/commit/4f085eea879e2be745f4d9bf57e8513ae48157f4","https://github.com/libarchive/libarchive/issues/1298","https://www.cve.org/CVERecord?id=CVE-2020-21674"],"bugs":[""],"patches":{"libarchive":[]},"tags":{},"packages":[{"name":"libarchive","source":"https://ubuntu.com/security/cve?package=libarchive","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libarchive","debian":"https://tracker.debian.org/pkg/libarchive","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-27153","published":"2020-10-15T03:15:00","updated_at":"2025-08-25T23:24:59.075230+00:00","description":"\nIn BlueZ before 5.55, a double free was found in the gatttool\ndisconnect_cb() routine from shared/att.c. A remote attacker could\npotentially cause a denial of service or code execution, during service\ndiscovery, due to a redundant disconnect MGMT event.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"per Red Hat, there is currently no known path to code execution\nas there is a small time window between the two calls to free()\nas such, marking as low priority."}],"codename":null,"priority":"low","cvss3":8.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/bluez/bluez/commit/5a180f2ec9edfacafd95e5fed20d36fe8e077f07","https://ubuntu.com/security/notices/USN-4989-1","https://ubuntu.com/security/notices/USN-4989-2","https://www.cve.org/CVERecord?id=CVE-2020-27153"],"bugs":["https://bugzilla.redhat.com/show_bug.cgi?id=1884817"],"patches":{"bluez":["upstream: https://github.com/bluez/bluez/commit/1cd644db8c23a2f530ddb93cebed7dacc5f5721a"]},"tags":{},"packages":[{"name":"bluez","source":"https://ubuntu.com/security/cve?package=bluez","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bluez","debian":"https://tracker.debian.org/pkg/bluez","statuses":[{"release_codename":"hirsute","status":"released","description":"5.55-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"5.48-0ubuntu3.5","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"5.53-0ubuntu3.2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"5.55-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"5.55-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"5.55-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.55-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.37-0ubuntu5.3+esm1","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-4989-1","USN-4989-2"],"notices":[{"id":"USN-4989-1","title":"BlueZ vulnerabilities","summary":"Several security issues were fixed in BlueZ.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-06-16T12:18:32.742272","description":"It was discovered that BlueZ incorrectly checked certain permissions when\npairing. A local attacker could possibly use this issue to impersonate\ndevices. (CVE-2020-26558)\n\nJay LV discovered that BlueZ incorrectly handled redundant disconnect MGMT\nevents. A local attacker could use this issue to cause BlueZ to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-27153)\n\nZiming Zhang discovered that BlueZ incorrectly handled certain array\nindexes. A local attacker could use this issue to cause BlueZ to crash,\nresulting in a denial of service, or possibly obtain sensitive information.\nThis issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2021-3588)\n","is_hidden":false,"release_packages":{"groovy":[{"name":"bluez","version":"5.55-0ubuntu1.2","description":"Bluetooth tools and daemons","is_source":true},{"name":"libbluetooth3","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"bluez-tests","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"bluez-obexd","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"bluetooth","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"bluez","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"bluez-hcidump","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"bluez-cups","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"},{"name":"libbluetooth-dev","version":"5.55-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2","pocket":"security"}],"hirsute":[{"name":"bluez","version":"5.56-0ubuntu4.1","description":"Bluetooth tools and daemons","is_source":true},{"name":"libbluetooth3","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"bluez-tests","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"bluez-obexd","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"bluetooth","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"bluez","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"bluez-hcidump","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"bluez-cups","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"},{"name":"libbluetooth-dev","version":"5.56-0ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1","pocket":"security"}],"focal":[{"name":"bluez","version":"5.53-0ubuntu3.2","description":"Bluetooth tools and daemons","is_source":true},{"name":"libbluetooth3","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"bluez-tests","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"bluez-obexd","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"bluetooth","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"bluez","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"bluez-hcidump","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"bluez-cups","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"},{"name":"libbluetooth-dev","version":"5.53-0ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2","pocket":"security"}],"bionic":[{"name":"bluez","version":"5.48-0ubuntu3.5","description":"Bluetooth tools and daemons","is_source":true},{"name":"libbluetooth3","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"bluez-tests","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"bluez-obexd","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"bluetooth","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"bluez","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"bluez-hcidump","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"bluez-cups","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"},{"name":"libbluetooth-dev","version":"5.48-0ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":"https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-3588","CVE-2020-26558","CVE-2020-27153"]},{"id":"USN-4989-2","title":"BlueZ vulnerabilities","summary":"Several security issues were fixed in BlueZ.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-06-16T14:17:40.037745","description":"USN-4989-1 fixed several vulnerabilities in BlueZ. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that BlueZ incorrectly checked certain permissions when\n pairing. A local attacker could possibly use this issue to impersonate\n devices. (CVE-2020-26558)\n\n Jay LV discovered that BlueZ incorrectly handled redundant disconnect MGMT\n events. A local attacker could use this issue to cause BlueZ to crash,\n resulting in a denial of service, or possibly execute arbitrary code. This\n issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-27153)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"bluez","version":"5.37-0ubuntu5.3+esm1","description":"Bluetooth tools and daemons","is_source":true},{"name":"bluetooth","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"bluez","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"bluez-cups","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"bluez-hcidump","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"bluez-obexd","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"bluez-tests","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"libbluetooth-dev","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"},{"name":"libbluetooth3","version":"5.37-0ubuntu5.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bluez","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2020-26558","CVE-2020-27153"]}]},{"id":"CVE-2020-15157","published":"2020-10-15T00:00:00","updated_at":"2025-08-25T23:20:58.863530+00:00","description":"\nIn containerd (an industry-standard container runtime) before version\n1.2.14 there is a credential leaking vulnerability. If a container image\nmanifest in the OCI Image format or Docker Image V2 Schema 2 format\nincludes a URL for the location of a specific image layer (otherwise known\nas a “foreign layer”), the default containerd resolver will follow that URL\nto attempt to download it. In v1.2.x but not 1.3.0 or later, the default\ncontainerd resolver will provide its authentication credentials if the\nserver where the URL is located presents an HTTP 401 status code along with\nregistry-specific HTTP headers. If an attacker publishes a public image\nwith a manifest that directs one of the layers to be fetched from a web\nserver they control and they trick a user or system into pulling the image,\nthey can obtain the credentials used for pulling that image. In some cases,\nthis may be the user's username and password for the registry. In other\ncases, this may be the credentials attached to the cloud virtual instance\nwhich can grant access to other cloud resources in the account. The default\ncontainerd resolver is used by the cri-containerd plugin (which can be used\nby Kubernetes), the ctr development tool, and other client programs that\nhave explicitly linked against it. This vulnerability has been fixed in\ncontainerd 1.2.14. containerd 1.3 and later are not affected. If you are\nusing containerd 1.3 or later, you are not affected. If you are using\ncri-containerd in the 1.2 series or prior, you should ensure you only pull\nimages from trusted sources. Other container runtimes built on top of\ncontainerd but not using the default resolver (such as Docker) are not\naffected.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4589-1","https://ubuntu.com/security/notices/USN-4589-2","https://www.cve.org/CVERecord?id=CVE-2020-15157"],"bugs":[""],"patches":{"containerd":[],"docker.io":[]},"tags":{},"packages":[{"name":"containerd","source":"https://ubuntu.com/security/cve?package=containerd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=containerd","debian":"https://tracker.debian.org/pkg/containerd","statuses":[{"release_codename":"bionic","status":"not-affected","description":"v1.2 only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"v1.2 only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.2.6-0ubuntu1~16.04.4","component":null,"pocket":"security"}]},{"name":"docker.io","source":"https://ubuntu.com/security/cve?package=docker.io","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=docker.io","debian":"https://tracker.debian.org/pkg/docker.io","statuses":[{"release_codename":"bionic","status":"released","description":"19.03.6-0ubuntu1~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"19.03.8-0ubuntu1.20.04.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"18.09.7-0ubuntu1~16.04.6","component":null,"pocket":"security"}]}],"notices_ids":["USN-4589-1","USN-4589-2"],"notices":[{"id":"USN-4589-1","title":"containerd vulnerability","summary":"containerd could be made to expose sensitive information over the\nnetwork.\n","instructions":"After a standard system update you need to restart containerd to make\nall the necessary changes.\n","references":[],"published":"2020-10-15T19:58:02.348423","description":"It was discovered that containerd could be made to expose sensitive\ninformation when processing URLs in container image manifests. A\nremote attacker could use this to trick the user and obtain the\nuser's registry credentials.\n","is_hidden":false,"release_packages":{"xenial":[{"name":"containerd","version":"1.2.6-0ubuntu1~16.04.4","description":"daemon to control containers","is_source":true},{"name":"containerd","version":"1.2.6-0ubuntu1~16.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/containerd","version_link":"https://launchpad.net/ubuntu/+source/containerd/1.2.6-0ubuntu1~16.04.4","pocket":"security"},{"name":"golang-github-docker-containerd-dev","version":"1.2.6-0ubuntu1~16.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/containerd","version_link":"https://launchpad.net/ubuntu/+source/containerd/1.2.6-0ubuntu1~16.04.4","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-15157"]},{"id":"USN-4589-2","title":"Docker vulnerability","summary":"Docker could be made to expose sensitive information over the\nnetwork.\n","instructions":"After a standard system update you need to restart docker to make\nall the necessary changes.\n","references":[],"published":"2020-10-15T20:00:45.357204","description":"USN-4589-1 fixed a vulnerability in containerd. This update provides\nthe corresponding update for docker.io.\n\nOriginal advisory details:\n\nIt was discovered that containerd could be made to expose sensitive\ninformation when processing URLs in container image manifests. A\nremote attacker could use this to trick the user and obtain the\nuser's registry credentials.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"docker.io","version":"19.03.6-0ubuntu1~18.04.2","description":"Linux container runtime","is_source":true},{"name":"docker-doc","version":"19.03.6-0ubuntu1~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.6-0ubuntu1~18.04.2","pocket":"security"},{"name":"docker.io","version":"19.03.6-0ubuntu1~18.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.6-0ubuntu1~18.04.2","pocket":"security"},{"name":"golang-docker-dev","version":"19.03.6-0ubuntu1~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.6-0ubuntu1~18.04.2","pocket":"security"},{"name":"golang-github-docker-docker-dev","version":"19.03.6-0ubuntu1~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.6-0ubuntu1~18.04.2","pocket":"security"},{"name":"vim-syntax-docker","version":"19.03.6-0ubuntu1~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.6-0ubuntu1~18.04.2","pocket":"security"}],"focal":[{"name":"docker.io","version":"19.03.8-0ubuntu1.20.04.1","description":"Linux container runtime","is_source":true},{"name":"docker-doc","version":"19.03.8-0ubuntu1.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.8-0ubuntu1.20.04.1","pocket":"security"},{"name":"docker.io","version":"19.03.8-0ubuntu1.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.8-0ubuntu1.20.04.1","pocket":"security"},{"name":"golang-docker-dev","version":"19.03.8-0ubuntu1.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.8-0ubuntu1.20.04.1","pocket":"security"},{"name":"golang-github-docker-docker-dev","version":"19.03.8-0ubuntu1.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.8-0ubuntu1.20.04.1","pocket":"security"},{"name":"vim-syntax-docker","version":"19.03.8-0ubuntu1.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/19.03.8-0ubuntu1.20.04.1","pocket":"security"}],"xenial":[{"name":"docker.io","version":"18.09.7-0ubuntu1~16.04.6","description":"Linux container runtime","is_source":true},{"name":"docker-doc","version":"18.09.7-0ubuntu1~16.04.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.6","pocket":"security"},{"name":"docker.io","version":"18.09.7-0ubuntu1~16.04.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.6","pocket":"security"},{"name":"golang-docker-dev","version":"18.09.7-0ubuntu1~16.04.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.6","pocket":"security"},{"name":"golang-github-docker-docker-dev","version":"18.09.7-0ubuntu1~16.04.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.6","pocket":"security"},{"name":"vim-syntax-docker","version":"18.09.7-0ubuntu1~16.04.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/docker.io","version_link":"https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.6","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-15157"]}]},{"id":"CVE-2020-15229","published":"2020-10-14T19:15:00","updated_at":"2025-08-25T23:20:58.863530+00:00","description":"\nSingularity (an open source container platform) from version 3.1.1 through\n3.6.3 has a vulnerability. Due to insecure handling of path traversal and\nthe lack of path sanitization within `unsquashfs`, it is possible to\noverwrite/create any files on the host filesystem during the extraction\nwith a crafted squashfs filesystem. The extraction occurs automatically for\nunprivileged (either installation or with `allow setuid = no`) run of\nSingularity when a user attempt to run an image which is a local SIF image\nor a single file containing a squashfs filesystem and is coming from remote\nsources `library://` or `shub://`. Image build is also impacted in a more\nserious way as it can be used by a root user, allowing an attacker to\noverwrite/create files leading to a system compromise, so far bootstrap\nmethods `library`, `shub` and `localimage` are triggering the squashfs\nextraction. This issue is addressed in Singularity 3.6.4. All users are\nadvised to upgrade to 3.6.4 especially if they use Singularity mainly for\nbuilding image as root user. There is no solid workaround except to\ntemporary avoid to use unprivileged mode with single file images in favor\nof sandbox images instead. Regarding image build, temporary avoid to build\nfrom `library` and `shub` sources and as much as possible use `--fakeroot`\nor a VM for that.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":9.3,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/hpcng/singularity/security/advisories/GHSA-7gcp-w6ww-2xv9","https://github.com/hpcng/singularity/blob/v3.6.4/CHANGELOG.md#security-related-fixes","https://github.com/hpcng/singularity/commit/eba3dea260b117198fdb6faf41f2482ab2f8d53e","https://github.com/hpcng/singularity/pull/5611","https://www.cve.org/CVERecord?id=CVE-2020-15229"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972212"],"patches":{"singularity-container":[]},"tags":{},"packages":[{"name":"singularity-container","source":"https://ubuntu.com/security/cve?package=singularity-container","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=singularity-container","debian":"https://tracker.debian.org/pkg/singularity-container","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":44400,"limit":20,"total_results":79316}