🟢 Low ⏱ 5–15 min Last verified: 20 June 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4378-1 Related CVEs: CVE-2018-1000656 Upstream summary: It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 18 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4848-1 Related CVEs: CVE-2018-18778 Upstream summary: It was discovered that ACME mini_httpd did not properly handle HTTP GET requests with empty headers. A remote attacker could use this vulnerability to […]
🟡 Medium ⏱ 10–30 min Last verified: 18 June 2018 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-9275 Upstream summary: In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the […]
🟡 Medium ⏱ 10–30 min Last verified: 17 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3495-1 Related CVEs: CVE-2017-1000229 CVE-2015-7801 CVE-2015-7802 CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 Upstream summary: It was discovered that OptiPNG incorrectly handled memory. A remote attacker could use this issue with a specially crafted […]
🟢 Low ⏱ 5–15 min Last verified: 15 June 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3807-1 Related CVEs: CVE-2018-15688 Upstream summary: Felix Wilhelm discovered that the NetworkManager internal DHCPv6 client incorrectly handled certain DHCPv6 messages. In non-default configurations where the internal DHCP client is enabled, […]
🟡 Medium ⏱ 10–30 min Last verified: 15 June 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9936 CVE-2017-9935 CVE-2017-11613 CVE-2018-12900 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟢 Low ⏱ 5–15 min Last verified: 14 June 2018 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-17784 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 15–45 min Last verified: 13 June 2018 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2018-1853, IBM Support Bulletin CVE: CVE-2018-1853 NVD summary: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3694-1 Related CVEs: CVE-2017-10686 CVE-2017-11111 CVE-2017-14228 CVE-2017-17810 CVE-2017-17811 CVE-2017-17812 CVE-2017-17813 CVE-2017-17814 +7 more Upstream summary: It was discovered that NASM incorrectly handled certain source files. If a user or automated […]
🟠 High ⏱ 15–60 min Last verified: 13 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4780-1 Related CVEs: CVE-2015-9099 CVE-2015-9100 CVE-2015-9101 CVE-2017-13712 CVE-2017-15018 CVE-2017-11720 CVE-2017-9411 CVE-2017-8419 +4 more Upstream summary: It was discovered that LAME incorrectly handled certain audio files. A remote attacker could possibly […]
