January 2018

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3842-1 Related CVEs: CVE-2018-4700 CVE-2017-18248 CVE-2018-4180 CVE-2018-4181 CVE-2018-6553 CVE-2017-18190 https://launchpad.net/bugs/1505328 CVE-2015-1158  +6 more Upstream summary: Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3563-1 Related CVEs: CVE-2018-5950 CVE-2016-6893 CVE-2016-7123 CVE-2015-2775 Upstream summary: It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3503-1 Related CVEs: CVE-2017-1000159 CVE-2017-1000083 Upstream summary: It was discovered that Evince incorrectly handled printing certain DVI files. If a user were tricked into opening and printing a specially-named DVI […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4855-1 Related CVEs: CVE-2018-8768 Upstream summary: It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3246-1 Related CVEs: CVE-2017-6964 Upstream summary: Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3224-1 Related CVEs: CVE-2017-5985 CVE-2016-8649 Upstream summary: Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create […]