🟢 Low ⏱ 10–30 min Last verified: 10 September 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3566, IBM Support Bulletin CVE: CVE-2014-3566 NVD summary: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for […]
🟡 Medium ⏱ 10–30 min Last verified: 6 September 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2431-1 Related CVEs: CVE-2014-8583 CVE-2014-0240 CVE-2014-0242 Upstream summary: It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could […]
🟢 Low ⏱ 5–15 min Last verified: 26 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2300-1 Related CVEs: CVE-2014-4607 Upstream summary: Don A. Bailey discovered that LZO incorrectly handled certain input data. An attacker could use this issue to cause LZO to crash, resulting in […]
🟡 Medium ⏱ 10–30 min Last verified: 15 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2408-1 Related CVEs: CVE-2014-6414 CVE-2014-3555 CVE-2014-4615 CVE-2013-6433 CVE-2014-0187 CVE-2014-4167 Upstream summary: Elena Ezhova discovered that OpenStack Neutron did not properly perform access control checks for attributes. A remote authenticated attacker […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2649-1 Related CVEs: CVE-2014-1833 Upstream summary: It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a […]
🟢 Low ⏱ 5–15 min Last verified: 20 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2311-1 Related CVEs: CVE-2014-4615 Upstream summary: Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in REST […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3825-1 Related CVEs: CVE-2011-2767 Upstream summary: Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used by unprivileged users, contrary to the documentation. A local attacker could […]
🟠 High ⏱ 30–90 min Last verified: 6 July 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3074, IBM Support Bulletin CVE: CVE-2014-3074 NVD summary: The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and […]
🟡 Medium ⏱ 10–30 min Last verified: 26 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2709-2 Related CVEs: https://launchpad.net/bugs/1506238 https://launchpad.net/bugs/1483762 https://launchpad.net/bugs/1381359 Upstream summary: USN-2709-1 updated pollinate's certificate for entropy.ubuntu.com but did not include a new certificate authority certificate. This update fixes the problem. We apologize […]
🟢 Low ⏱ 5–15 min Last verified: 12 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2576-1 Related CVEs: https://launchpad.net/bugs/1447396 Upstream summary: Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Table of contents […]
