🟡 Medium ⏱ 10–30 min Last verified: 4 May 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2017-7524 Upstream summary: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating […]
🟡 Medium ⏱ 10–30 min Last verified: 3 May 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4774-1 Related CVEs: CVE-2015-3192 CVE-2015-5211 CVE-2016-9878 CVE-2014-0225 CVE-2014-3625 CVE-2014-3578 Upstream summary: Toshiaki Maki discovered that Spring Framework incorrectly handled certain XML files. A remote attacker could exploit this with a […]
🟢 Low ⏱ 5–15 min Last verified: 1 May 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3395-1 Related CVEs: CVE-2017-1000381 CVE-2016-5180 Upstream summary: It was discovered that c-ares incorrectly handled certain NAPTR responses. A remote attacker could possibly use this issue to cause applications using c-ares […]
🟡 Medium ⏱ 10–30 min Last verified: 30 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3283-1 Related CVEs: CVE-2015-8270 CVE-2015-8271 CVE-2015-8272 Upstream summary: Dave McDaniel discovered that rtmpdump incorrectly handled certain malformed streams. If a user were tricked into processing a specially crafted stream, a […]
🟢 Low ⏱ 5–15 min Last verified: 29 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3197-1 Related CVEs: CVE-2016-9427 Upstream summary: Kuang-che Wu discovered that multiple integer overflow vulnerabilities existed in libgc. An attacker could use these to cause a denial of service (application crash) […]
🟢 Low ⏱ 5–15 min Last verified: 28 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3483-1 Related CVEs: CVE-2017-16844 Upstream summary: Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to crash, […]
🟢 Low ⏱ 5–15 min Last verified: 26 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3666-1 Related CVEs: CVE-2017-2592 https://launchpad.net/bugs/1628031 Upstream summary: Divya K Konoor discovered Oslo middleware was vulnerable to an information disclosure. A local attacker could exploit this flaw to obtain sensitive information […]
🟡 Medium ⏱ 10–30 min Last verified: 23 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7034-2 Related CVEs: https://launchpad.net/bugs/2081875 https://launchpad.net/bugs/ https://launchpad.net/bugs/XXXXXX https://launchpad.net/bugs/1976631 https://launchpad.net/bugs/1944481 https://launchpad.net/bugs/1914064 https://launchpad.net/bugs/1900727 https://launchpad.net/bugs/1881533 +1 more Upstream summary: USN-7034-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu […]
🟢 Low ⏱ 5–15 min Last verified: 22 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3399-1 Related CVEs: CVE-2017-12836 Upstream summary: Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository […]
🟠 High ⏱ 15–60 min Last verified: 22 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3367-1 Related CVEs: CVE-2014-8501 CVE-2014-9939 CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4491 +3 more Upstream summary: Hanno Böck discovered that gdb incorrectly handled certain malformed AOUT headers in PE executables. If […]
