🟡 Medium ⏱ 10–30 min Last verified: 4 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3500-1 Related CVEs: CVE-2017-16611 CVE-2017-13720 CVE-2017-13722 Upstream summary: It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged user could use this issue to cause […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4590-1 Related CVEs: CVE-2015-0258 Upstream summary: It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3667-1 Related CVEs: CVE-2017-12141 CVE-2017-9058 CVE-2017-9146 CVE-2017-9471 CVE-2017-9473 CVE-2017-6298 CVE-2017-6299 CVE-2017-6300 +9 more Upstream summary: It was discovered that libytnef incorrectly handled certain files. An attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 1 June 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:2601-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-1000198 CVE-2017-1000199 Upstream summary: tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of service […]
🟠 High ⏱ 30–90 min Last verified: 31 May 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2016-8980, IBM Support Bulletin CVE: CVE-2016-8980 NVD summary: IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. […]
🟡 Medium ⏱ 15–45 min Last verified: 28 May 2017 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-8981, IBM Support Bulletin CVE: CVE-2016-8981 NVD summary: IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system. References: www.ibm.com/support/docview.wss?uid=swg21994932 […]
🟡 Medium ⏱ 10–30 min Last verified: 28 May 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:1137-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-3618 CVE-2017-16844 Upstream summary: Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3186-1 Related CVEs: CVE-2017-0357 Upstream summary: It was discovered that iucode-tool incorrectly handled certain microcodes when using the -tr loader. If a user were tricked into processing a specially crafted […]
🟢 Low ⏱ 5–15 min Last verified: 26 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5236-1 Related CVEs: CVE-2015-7700 Upstream summary: Brian Carpenter discovered that pngcrush incorrectly handled specially crafted file. An attacker could possibly use this issue to cause a denial of service. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 23 May 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3244-1 Related CVEs: CVE-2016-9811 CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844 Upstream summary: Hanno Böck discovered that GStreamer Base Plugins did not correctly handle certain malformed media files. If a user were tricked […]
