🟢 Low ⏱ 5–15 min Last verified: 21 June 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3067-1 Related CVEs: CVE-2015-8947 CVE-2016-2052 Upstream summary: Kostya Serebryany discovered that HarfBuzz incorrectly handled memory. A remote attacker could use this issue to cause HarfBuzz to crash, resulting in a […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3411-1 Related CVEs: https://launchpad.net/bugs/1710979 Upstream summary: Adam Collard discovered that Bazaar did not properly handle host names in 'bzr+ssh://' URLs. A remote attacker could use this to construct a bazaar […]
🟢 Low ⏱ 5–15 min Last verified: 20 June 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3413-1 Related CVEs: CVE-2017-1000250 Upstream summary: It was discovered that an information disclosure vulnerability existed in the Service Discovery Protocol (SDP) implementation in BlueZ. A physically proximate unauthenticated attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3584-1 Related CVEs: CVE-2017-17512 Upstream summary: Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker could possibly use this issue […]
🟡 Medium ⏱ 10–30 min Last verified: 15 June 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw […]
🟢 Low ⏱ 5–15 min Last verified: 14 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3401-1 Related CVEs: CVE-2016-10243 Upstream summary: It was discovered that TeX Live incorrectly handled certain system commands. If a user were tricked into processing a specially crafted TeX file, a […]
🟠 High ⏱ 30–90 min Last verified: 14 June 2017 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-8980, IBM Support Bulletin CVE: CVE-2016-8980 NVD summary: IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. […]
🟡 Medium ⏱ 10–30 min Last verified: 12 June 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1862-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a […]
🟡 Medium ⏱ 10–30 min Last verified: 10 June 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3368-1 Related CVEs: CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4491 CVE-2016-4492 CVE-2016-4493 +1 more Upstream summary: It was discovered that libiberty incorrectly handled certain string operations. If a user or automated […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3518-1 Related CVEs: CVE-2017-1000501 Upstream summary: It was discovered that AWStats incorrectly filtered certain parameters. A remote attacker could possibly use this issue to execute arbitrary code. Table of contents […]
