| CVE-2020-15701 | TRUNG BÌNH5.5 | An unhandled exception in check_ignored() in apport/report.py can be exploited by a local attacker to cause a denial of service. If the mtime attribute is a string value in apport-ignore.xml, it will trigger an unhandled exception, resulting in a crash. Fixed in 2.20.1-0ubuntu2.24, 2.20.9-0ubuntu7.16, 2.20.11-0ubuntu27 | 06/08/2020 |
| CVE-2020-11937 | TRUNG BÌNH5.5 | In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1. | 06/08/2020 |
| CVE-2020-11933 | TRUNG BÌNH6.8 | cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full dis | 29/07/2020 |
| CVE-2014-1422 | TRUNG BÌNH5.0 | In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in src/core/trust/impl/sqlite3/store.cpp. | 22/07/2020 |
| CVE-2020-11932 | THẤP2.3 | It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered. | 13/05/2020 |
| CVE-2019-11480 | CAO8.1 | The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a malicious package within th | 14/04/2020 |
| CVE-2019-15789 | CAO7.8 | Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3. | 08/04/2020 |
| CVE-2020-8632 | TRUNG BÌNH5.5 | In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. | 05/02/2020 |
| CVE-2020-8631 | TRUNG BÌNH5.5 | cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice function. | 05/02/2020 |
| CVE-2012-2092 | TRUNG BÌNH5.9 | A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature. | 06/12/2019 |
| CVE-2012-6639 | CAO8.8 | An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data. | 25/11/2019 |
| CVE-2019-11503 | CAO7.5 | snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass." | 24/04/2019 |
| CVE-2019-11502 | CAO7.5 | snap-confine in snapd before 2.38 incorrectly set the ownership of a snap application to the uid and gid of the first calling user. Consequently, that user had unintended access to a private /tmp directory. | 24/04/2019 |
| CVE-2019-7304 | NGHIÊM TRỌNG9.8 | Canonical snapd before version 2.37.1 incorrectly performed socket owner validation, allowing an attacker to run arbitrary commands as root. This issue affects: Canonical snapd versions prior to 2.37.1. | 23/04/2019 |
| CVE-2019-7303 | CAO7.5 | A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, the Linux kernel only uses the lower 32 bits to determine whi | 23/04/2019 |
| CVE-2016-1585 | NGHIÊM TRỌNG9.8 | In all versions of AppArmor mount rules are accidentally widened when compiled. | 22/04/2019 |
| CVE-2015-1341 | CAO7.8 | Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path. | 22/04/2019 |
| CVE-2015-1320 | NGHIÊM TRỌNG9.8 | The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2. | 22/04/2019 |
| CVE-2015-1316 | CAO7.5 | Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key. | 22/04/2019 |
| CVE-2014-1428 | TRUNG BÌNH5.3 | A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2. | 22/04/2019 |