First published: Tue Jun 25 2024(Updated: )
Matthieu Faou and Denys Klymenko discovered that Roundcube incorrectly handled certain SVG images. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2023-5631) Rene Rehme discovered that Roundcube incorrectly handled certain headers. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2023-47272) Valentin T. and Lutz Wolf discovered that Roundcube incorrectly handled certain SVG images. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2024-37383) Huy Nguyễn Phạm Nhật discovered that Roundcube incorrectly handled certain fields in user preferences. A remote attacker could possibly use this issue to load arbitrary JavaScript code. (CVE-2024-37384)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/roundcube | <1.6.2+dfsg-1ubuntu0.2 | 1.6.2+dfsg-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/roundcube-core | <1.6.2+dfsg-1ubuntu0.2 | 1.6.2+dfsg-1ubuntu0.2 |
Ubuntu Ubuntu | =23.10 | |
All of | ||
ubuntu/roundcube | <1.5.0+dfsg.1-2ubuntu0.1~esm3 | 1.5.0+dfsg.1-2ubuntu0.1~esm3 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/roundcube-core | <1.5.0+dfsg.1-2ubuntu0.1~esm3 | 1.5.0+dfsg.1-2ubuntu0.1~esm3 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/roundcube | <1.4.3+dfsg.1-1ubuntu0.1~esm4 | 1.4.3+dfsg.1-1ubuntu0.1~esm4 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/roundcube-core | <1.4.3+dfsg.1-1ubuntu0.1~esm4 | 1.4.3+dfsg.1-1ubuntu0.1~esm4 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/roundcube | <1.3.6+dfsg.1-1ubuntu0.1~esm4 | 1.3.6+dfsg.1-1ubuntu0.1~esm4 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/roundcube-core | <1.3.6+dfsg.1-1ubuntu0.1~esm4 | 1.3.6+dfsg.1-1ubuntu0.1~esm4 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/roundcube | <1.2~beta+dfsg.1-0ubuntu1+esm4 | 1.2~beta+dfsg.1-0ubuntu1+esm4 |
Ubuntu Ubuntu | =16.04 | |
All of | ||
ubuntu/roundcube-core | <1.2~beta+dfsg.1-0ubuntu1+esm4 | 1.2~beta+dfsg.1-0ubuntu1+esm4 |
Ubuntu Ubuntu | =16.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)