chris

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3658-1 Related CVEs: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Upstream summary: It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3748-1 Related CVEs: CVE-2018-6557 Upstream summary: Sander Bos discovered that the MOTD update script incorrectly handled temporary files. A local attacker could use this issue to cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3245-1 Related CVEs: CVE-2016-10198 CVE-2016-10199 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 https://launchpad.net/bugs/1643901 Upstream summary: Hanno Böck discovered that GStreamer Good Plugins did not correctly handle certain malformed media files. If a user were […]

🟠 High   ⏱ 15–60 min  Last verified: 1 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3782-1 Related CVEs: CVE-2018-12085 CVE-2018-17294 CVE-2018-11683 CVE-2018-11684 CVE-2018-11685 CVE-2018-11410 CVE-2018-11440 CVE-2018-11577  +6 more Upstream summary: Henri Salo discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 30 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4252-2 Related CVEs: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465  +12 more Upstream summary: USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 12.04 […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5690-1 Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4827-1 Related CVEs: CVE-2017-9434 Upstream summary: It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Table of contents Symptom & […]