Artifact
ubuntu-22.04.5-live-server-amd64.iso
Ubuntu · 22.04.5 amd64 live-server · iso · 2.0 GB
Checksums
Quality
- Confidence
- 1.00
- Missing checksum
- no
- Missing architecture
- no
- Stale downloads
- 0
- Audited
Download Sources
Related CVEs
- CVE-2017-9525
MEDIUM · In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
- CVE-2019-9512
HIGH · Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
- CVE-2021-3899
HIGH · There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root.
- CVE-2022-0492
HIGH · A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
- CVE-2022-1055
HIGH · A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
- CVE-2022-1242
HIGH · Apport can be tricked into connecting to arbitrary sockets as the root user
- CVE-2022-1736
CRITICAL · Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.
- CVE-2022-1804
MEDIUM · accountsservice no longer drops permissions when writting .pam_environment
- CVE-2022-2084
MEDIUM · Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could include hashed passwords.
- CVE-2022-2585
MEDIUM · It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
- CVE-2022-2586
MEDIUM · It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
- CVE-2022-2588
MEDIUM · It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
- CVE-2022-2602
MEDIUM · io_uring UAF, Unix SCM garbage collection
- CVE-2022-28652
MEDIUM · ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
- CVE-2022-28654
MEDIUM · is_closing_session() allows users to fill up apport.log
- CVE-2022-28655
HIGH · is_closing_session() allows users to create arbitrary tcp dbus connections
- CVE-2022-28656
MEDIUM · is_closing_session() allows users to consume RAM in the Apport process
- CVE-2022-28657
HIGH · Apport does not disable python crash handler before entering chroot
- CVE-2022-28658
MEDIUM · Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
- CVE-2022-29581
HIGH · Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.
- CVE-2022-3328
HIGH · Race condition in snap-confine's must_mkdir_and_open_with_perms()
- CVE-2022-34918
HIGH · An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.
- CVE-2022-40617
HIGH · strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
- CVE-2022-41222
HIGH · mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
- CVE-2023-0179
HIGH · A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
- CVE-2023-0386
HIGH · A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.
- CVE-2023-1032
MEDIUM · The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
- CVE-2023-1326
HIGH · A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.
- CVE-2023-1380
HIGH · A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.
- CVE-2023-1523
CRITICAL · Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others are not affected - this can only be exploited when snaps are run on a virtual console.