🟢 Low ⏱ 5–15 min Last verified: 15 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4554-1 Related CVEs: CVE-2015-6673 Upstream summary: It was discovered that libPGF lacked proper validation when opening a specially crafted PGF file. An attacker could possibly use this issue to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 13 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4695-1 Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 CVE-2017-6009 CVE-2017-6010 CVE-2017-6011 Upstream summary: Choongwoo Han discovered that icoutils incorrectly handled certain files. An attacker could possibly use this issue to cause […]
🟢 Low ⏱ 5–15 min Last verified: 11 September 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-14604 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 10 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4513-1 Related CVEs: CVE-2017-6960 Upstream summary: Dileep Kumar Jallepalli discovered that apng2gif incorrectly handled loading APNG files. An attacker could exploit this with a crafted APNG file to access sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3454-1 Related CVEs: CVE-2017-1000376 Upstream summary: It was discovered that libffi incorrectly enforced an executable stack. An attacker could possibly use this issue, in combination with another vulnerability, to facilitate […]
🟢 Low ⏱ 5–15 min Last verified: 6 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3913-1 Related CVEs: CVE-2016-2335 CVE-2017-17969 Upstream summary: It was discovered that p7zip did not correctly handle certain malformed archives. If a user or automated system were tricked into processing a […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4795-1 Related CVEs: CVE-2016-6814 Upstream summary: It was discovered that Apache Groovy incorrectly handled serialization mechanisms. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]
🟢 Low ⏱ 5–15 min Last verified: 5 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4771-1 Related CVEs: CVE-2014-8126 CVE-2017-16816 Upstream summary: It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue only […]
🟡 Medium ⏱ 10–30 min Last verified: 2 September 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4793-1 Related CVEs: CVE-2016-6254 CVE-2017-16820 CVE-2017-7401 Upstream summary: It was discovered that collectd mishandled certain malformed packets. A remote attacker could use this vulnerability to cause collectd to crash or […]
🟠 High ⏱ 15–60 min Last verified: 2 September 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9940 CVE-2015-8553 CVE-2015-9016 CVE-2017-7518 CVE-2017-5754 CVE-2017-7346 CVE-2017-8824 CVE-2017-5715 +12 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
