{"cves":[{"id":"CVE-2019-5057","published":"2019-07-31T17:15:00","updated_at":"2025-08-26T12:17:01.395119+00:00","description":"\nAn exploitable code execution vulnerability exists in the PCX\nimage-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX\nimage can cause a heap overflow, resulting in code execution. An attacker\ncan display a specially crafted image to trigger this vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2019-0841","https://www.cve.org/CVERecord?id=CVE-2019-5057"],"bugs":[""],"patches":{"libsdl2-image":[]},"tags":{},"packages":[{"name":"libsdl2-image","source":"https://ubuntu.com/security/cve?package=libsdl2-image","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libsdl2-image","debian":"https://tracker.debian.org/pkg/libsdl2-image","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.5+dfsg1-1, 2.0.4+dfsg1-1+deb10u1, 2.0.1+dfsg-2+deb9u2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.0.5+dfsg1-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-5020","published":"2019-07-31T17:15:00","updated_at":"2025-08-25T23:12:10.044981+00:00","description":"\nAn exploitable denial of service vulnerability exists in the object lookup\nfunctionality of Yara 3.8.1. A specially crafted binary file can cause a\nnegative value to be read to satisfy an assert, resulting in Denial of\nService. An attacker can create a malicious binary to trigger this\nvulnerability.","ubuntu_description":"","notes":[{"author":"ebarretto","note":"upstream fix introduced a regression, please check if all necessary\ncommits are included when patching."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://talosintelligence.com/vulnerability_reports/TALOS-2019-0781","https://github.com/VirusTotal/yara/issues/1023","https://www.cve.org/CVERecord?id=CVE-2019-5020"],"bugs":[""],"patches":{"yara":["upstream: https://github.com/VirusTotal/yara/commit/1ecb0e66431bf5c5b4c2fdf622be969eb5f4a7cc","upstream: https://github.com/VirusTotal/yara/commit/a3784d3855029bd0ad24071e72746cc0c31b8cba"]},"tags":{},"packages":[{"name":"yara","source":"https://ubuntu.com/security/cve?package=yara","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=yara","debian":"https://tracker.debian.org/pkg/yara","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"3.9.0-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.9.0-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-13568","published":"2019-07-31T15:15:00","updated_at":"2025-08-26T12:12:08.659995+00:00","description":"\nCImg through 2.6.7 has a heap-based buffer overflow in _load_bmp in CImg.h\nbecause of erroneous memory allocation for a malformed BMP image.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2019-13568"],"bugs":[""],"patches":{"cimg":["upstream: https://github.com/dtschump/CImg/commit/ac8003393569aba51048c9d67e1491559877b1d1"]},"tags":{},"packages":[{"name":"cimg","source":"https://ubuntu.com/security/cve?package=cimg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cimg","debian":"https://tracker.debian.org/pkg/cimg","statuses":[{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.8.4+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14204","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is a\nstack-based buffer overflow in this nfs_handler reply helper function:\nnfs_umountall_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14204"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14203","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is a\nstack-based buffer overflow in this nfs_handler reply helper function:\nnfs_mount_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14203"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14202","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is a\nstack-based buffer overflow in this nfs_handler reply helper function:\nnfs_readlink_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14202"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14201","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is a\nstack-based buffer overflow in this nfs_handler reply helper function:\nnfs_lookup_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14201"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14200","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is a\nstack-based buffer overflow in this nfs_handler reply helper function:\nrpc_lookup_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14200"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14199","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy when parsing a UDP packet due to a\nnet_process_received_packet integer underflow during an *udp_packet_handler\ncall.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14199"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/fe7288069d2e6659117049f7d27e261b550bb725"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14198","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:24.211545+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy with a failed length check at nfs_read_reply when calling\nstore_block in the NFSv3 case.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14198"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/aa207cf3a6d68f39d64cd29057a4fb63943e9078"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14197","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:18.413031+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of\nout-of-bounds data at nfs_read_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14197"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/741a8a08ebe5bc3ccfe3cde6c2b44ee53891af21"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14196","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:18.413031+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy with a failed length check at nfs_lookup_reply.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14196"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14195","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:18.413031+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy with unvalidated length at nfs_readlink_reply in the\n\"else\" block after calculating the new path length.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14195"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/cf3a4f1e86ecdd24f87b615051b49d8e1968c230"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14194","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:18.413031+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy with a failed length check at nfs_read_reply when calling\nstore_block in the NFSv2 case.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14194"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/aa207cf3a6d68f39d64cd29057a4fb63943e9078"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14193","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:18.413031+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy with an unvalidated length at nfs_readlink_reply, in the\n\"if\" block after calculating the new path length.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://www.cve.org/CVERecord?id=CVE-2019-14193"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/fe7288069d2e6659117049f7d27e261b550bb725"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14192","published":"2019-07-31T13:15:00","updated_at":"2025-08-18T17:09:18.413031+00:00","description":"\nAn issue was discovered in Das U-Boot through 2019.07. There is an\nunbounded memcpy when parsing a UDP packet due to a\nnet_process_received_packet integer underflow during an nc_input_packet\ncall.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.semmle.com/uboot-rce-nfs-vulnerability/","https://gitlab.denx.de/u-boot/u-boot","https://lists.denx.de/pipermail/u-boot/2019-July/378190.html","https://www.cve.org/CVERecord?id=CVE-2019-14192"],"bugs":[""],"patches":{"u-boot":["upstream: https://gitlab.denx.de/u-boot/u-boot/commit/fe7288069d2e6659117049f7d27e261b550bb725"]},"tags":{},"packages":[{"name":"u-boot","source":"https://ubuntu.com/security/cve?package=u-boot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=u-boot","debian":"https://tracker.debian.org/pkg/u-boot","statuses":[{"release_codename":"bionic","status":"released","description":"2020.10+dfsg-1ubuntu0~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2021.01+dfsg-3ubuntu0~20.04.3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2020.01+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2020.04+dfsg-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-0203","published":"2019-07-31T12:00:00","updated_at":"2025-08-25T23:00:25.481393+00:00","description":"\nIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0,\nSubversion's svnserve server process may exit when a client sends certain\nsequences of protocol commands. This can lead to disruption for users of\nthe server.","ubuntu_description":"\nTomas Bortoli discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service.","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://subversion.apache.org/security/CVE-2019-0203-advisory.txt","https://ubuntu.com/security/notices/USN-4082-2","https://ubuntu.com/security/notices/USN-4082-1","https://ubuntu.com/security/notices/USN-5445-1","https://www.cve.org/CVERecord?id=CVE-2019-0203"],"bugs":[""],"patches":{"subversion":[]},"tags":{},"packages":[{"name":"subversion","source":"https://ubuntu.com/security/cve?package=subversion","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=subversion","debian":"https://tracker.debian.org/pkg/subversion","statuses":[{"release_codename":"impish","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.9.7-4ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.12.2,1.10.6,1.9.12","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.9.3-2ubuntu1.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-4082-2","USN-4082-1","USN-5445-1"],"notices":[{"id":"USN-4082-2","title":"Subversion vulnerabilities","summary":"Subversion could be made to crash if it received specially crafted network\ntraffic.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-07-31T18:19:47.341063","description":"USN-4082-1 fixed several vulnerabilities in Subversion. This update provides\nthe corresponding update for Ubuntu 12.04 ESM.\n\nOriginal advisory details:\n\n Ace Olszowka discovered that Subversion incorrectly handled certain\n svnserve requests. A remote attacker could possibly use this issue to\n cause svnserver to crash, resulting in a denial of service.\n (CVE-2018-11782)\n\n Tomas Bortoli discovered that Subversion incorrectly handled certain\n svnserve requests. A remote attacker could possibly use this issue to\n cause svnserver to crash, resulting in a denial of service. (CVE-2019-0203)\n","is_hidden":false,"release_packages":{"precise":[{"name":"subversion","version":"1.6.17dfsg-3ubuntu3.8","description":"Advanced version control system","is_source":true},{"name":"subversion","version":"1.6.17dfsg-3ubuntu3.8","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.6.17dfsg-3ubuntu3.8"},{"name":"libsvn1","version":"1.6.17dfsg-3ubuntu3.8","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.6.17dfsg-3ubuntu3.8"}]},"type":"USN","cves_ids":["CVE-2018-11782","CVE-2019-0203"]},{"id":"USN-4082-1","title":"Subversion vulnerabilities","summary":"Subversion could be made to crash if it received specially crafted network\ntraffic.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-07-31T16:44:56.038171","description":"Ace Olszowka discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to\ncause svnserver to crash, resulting in a denial of service.\n(CVE-2018-11782)\n\nTomas Bortoli discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to\ncause svnserver to crash, resulting in a denial of service. (CVE-2019-0203)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"subversion","version":"1.9.3-2ubuntu1.3","description":"Advanced version control system","is_source":true},{"name":"libapache2-mod-svn","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libapache2-svn","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-dev","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-doc","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-java","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-perl","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-ruby1.8","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn1","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"python-subversion","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"ruby-svn","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"subversion","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"subversion-tools","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2018-11782","CVE-2019-0203"]},{"id":"USN-5445-1","title":"Subversion vulnerabilities","summary":"Several security issues were fixed in subversion.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-05-26T04:46:55.902489","description":"Ace Olszowka discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2018-11782)\n\nTomas Bortoli discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2019-0203)\n\nThomas Åkesson discovered that Subversion incorrectly handled certain\ninputs. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-17525)\n","is_hidden":false,"release_packages":{"focal":[{"name":"subversion","version":"1.13.0-3ubuntu0.2","description":"Advanced version control system","is_source":true},{"name":"libsvn-dev","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"ruby-svn","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"subversion-tools","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libapache2-mod-svn","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"python-subversion","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn1","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"subversion","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn-doc","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn-java","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn-perl","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"}],"bionic":[{"name":"subversion","version":"1.9.7-4ubuntu1.1","description":"Advanced version control system","is_source":true},{"name":"libsvn-dev","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"ruby-svn","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"subversion-tools","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libapache2-mod-svn","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"python-subversion","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn1","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"subversion","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn-doc","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn-java","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn-perl","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-17525","CVE-2019-0203","CVE-2018-11782"]}]},{"id":"CVE-2018-11782","published":"2019-07-31T12:00:00","updated_at":"2025-08-25T22:45:17.480355+00:00","description":"\nIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0,\nSubversion's svnserve server process may exit when a well-formed read-only\nrequest produces a particular answer. This can lead to disruption for users\nof the server.","ubuntu_description":"\nAce Olszowka discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service.","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://subversion.apache.org/security/CVE-2018-11782-advisory.txt","https://ubuntu.com/security/notices/USN-4082-2","https://ubuntu.com/security/notices/USN-4082-1","https://ubuntu.com/security/notices/USN-5445-1","https://www.cve.org/CVERecord?id=CVE-2018-11782"],"bugs":[""],"patches":{"subversion":[]},"tags":{},"packages":[{"name":"subversion","source":"https://ubuntu.com/security/cve?package=subversion","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=subversion","debian":"https://tracker.debian.org/pkg/subversion","statuses":[{"release_codename":"impish","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.9.7-4ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.10.6-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.12.2,1.10.6,1.9.12","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.9.3-2ubuntu1.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-4082-2","USN-4082-1","USN-5445-1"],"notices":[{"id":"USN-4082-2","title":"Subversion vulnerabilities","summary":"Subversion could be made to crash if it received specially crafted network\ntraffic.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-07-31T18:19:47.341063","description":"USN-4082-1 fixed several vulnerabilities in Subversion. This update provides\nthe corresponding update for Ubuntu 12.04 ESM.\n\nOriginal advisory details:\n\n Ace Olszowka discovered that Subversion incorrectly handled certain\n svnserve requests. A remote attacker could possibly use this issue to\n cause svnserver to crash, resulting in a denial of service.\n (CVE-2018-11782)\n\n Tomas Bortoli discovered that Subversion incorrectly handled certain\n svnserve requests. A remote attacker could possibly use this issue to\n cause svnserver to crash, resulting in a denial of service. (CVE-2019-0203)\n","is_hidden":false,"release_packages":{"precise":[{"name":"subversion","version":"1.6.17dfsg-3ubuntu3.8","description":"Advanced version control system","is_source":true},{"name":"subversion","version":"1.6.17dfsg-3ubuntu3.8","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.6.17dfsg-3ubuntu3.8"},{"name":"libsvn1","version":"1.6.17dfsg-3ubuntu3.8","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.6.17dfsg-3ubuntu3.8"}]},"type":"USN","cves_ids":["CVE-2018-11782","CVE-2019-0203"]},{"id":"USN-4082-1","title":"Subversion vulnerabilities","summary":"Subversion could be made to crash if it received specially crafted network\ntraffic.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-07-31T16:44:56.038171","description":"Ace Olszowka discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to\ncause svnserver to crash, resulting in a denial of service.\n(CVE-2018-11782)\n\nTomas Bortoli discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to\ncause svnserver to crash, resulting in a denial of service. (CVE-2019-0203)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"subversion","version":"1.9.3-2ubuntu1.3","description":"Advanced version control system","is_source":true},{"name":"libapache2-mod-svn","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libapache2-svn","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-dev","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-doc","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-java","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-perl","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn-ruby1.8","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"libsvn1","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"python-subversion","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"ruby-svn","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"subversion","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"},{"name":"subversion-tools","version":"1.9.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.3-2ubuntu1.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2018-11782","CVE-2019-0203"]},{"id":"USN-5445-1","title":"Subversion vulnerabilities","summary":"Several security issues were fixed in subversion.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-05-26T04:46:55.902489","description":"Ace Olszowka discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2018-11782)\n\nTomas Bortoli discovered that Subversion incorrectly handled certain\nsvnserve requests. A remote attacker could possibly use this issue to cause\nsvnserver to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS. (CVE-2019-0203)\n\nThomas Åkesson discovered that Subversion incorrectly handled certain\ninputs. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-17525)\n","is_hidden":false,"release_packages":{"focal":[{"name":"subversion","version":"1.13.0-3ubuntu0.2","description":"Advanced version control system","is_source":true},{"name":"libsvn-dev","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"ruby-svn","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"subversion-tools","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libapache2-mod-svn","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"python-subversion","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn1","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"subversion","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn-doc","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn-java","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"},{"name":"libsvn-perl","version":"1.13.0-3ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.13.0-3ubuntu0.2","pocket":"security"}],"bionic":[{"name":"subversion","version":"1.9.7-4ubuntu1.1","description":"Advanced version control system","is_source":true},{"name":"libsvn-dev","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"ruby-svn","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"subversion-tools","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libapache2-mod-svn","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"python-subversion","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn1","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"subversion","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn-doc","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn-java","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"},{"name":"libsvn-perl","version":"1.9.7-4ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/subversion","version_link":"https://launchpad.net/ubuntu/+source/subversion/1.9.7-4ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-17525","CVE-2019-0203","CVE-2018-11782"]}]},{"id":"CVE-2019-14361","published":"2019-07-31T11:15:00","updated_at":"2025-08-04T19:32:15.507409+00:00","description":"\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:\nCVE-2019-14439. Reason: This candidate is a reservation duplicate of\nCVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439\ninstead of this candidate. All references and descriptions in this\ncandidate have been removed to prevent accidental usage","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://github.com/FasterXML/jackson-databind/issues/2389","https://github.com/FasterXML/jackson-databind/commit/ad418eeb974e357f2797aef64aa0e3ffaaa6125b","https://www.cve.org/CVERecord?id=CVE-2019-14361"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933393"],"patches":{"jackson-databind":[]},"tags":{},"packages":[{"name":"jackson-databind","source":"https://ubuntu.com/security/cve?package=jackson-databind","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jackson-databind","debian":"https://tracker.debian.org/pkg/jackson-databind","statuses":[{"release_codename":"trusty","status":"not-affected","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"CVE rejected","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"end of standard support","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-10163","published":"2019-07-30T23:15:00","updated_at":"2025-08-26T12:10:53.377981+00:00","description":"\nA Vulnerability has been found in PowerDNS Authoritative Server before\nversions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause\na high CPU load or even prevent any further updates to any slave zone by\nsending a large number of NOTIFY messages. Note that only servers\nconfigured as slaves are affected by this issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.5,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.openwall.com/lists/oss-security/2019/06/21/5","https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-05.html","https://www.cve.org/CVERecord?id=CVE-2019-10163"],"bugs":[""],"patches":{"pdns":[]},"tags":{},"packages":[{"name":"pdns","source":"https://ubuntu.com/security/cve?package=pdns","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pdns","debian":"https://tracker.debian.org/pkg/pdns","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.1.6-3build1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":48780,"limit":20,"total_results":79316}