🟡 Medium ⏱ 10–30 min Last verified: 23 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3075-1 Related CVEs: CVE-2011-5326 CVE-2014-9762 CVE-2014-9763 CVE-2014-9764 CVE-2014-9771 CVE-2016-3993 CVE-2016-3994 CVE-2016-4024 Upstream summary: Jakub Wilk discovered an out of bounds read in the GIF loader implementation in Imlib2. An attacker […]
🟢 Low ⏱ 5–15 min Last verified: 22 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3494-1 Related CVEs: CVE-2017-10672 Upstream summary: It was discovered that XML::LibXML incorrectly handled memory when processing a replaceChild call. A remote attacker could possibly use this issue to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 20 August 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3297-1 Related CVEs: CVE-2016-9601 CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 Upstream summary: Bingchang Liu discovered that jbig2dec incorrectly handled memory when decoding malformed image files. If a user or automated system were tricked […]
🟢 Low ⏱ 5–15 min Last verified: 17 August 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-1000421 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 30–90 min Last verified: 17 August 2017 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2017-1093, IBM Support Bulletin CVE: CVE-2017-1093 NVD summary: IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain […]
🟡 Medium ⏱ 10–30 min Last verified: 14 August 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1250-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-2669 Upstream summary: Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the […]
🟢 Low ⏱ 5–15 min Last verified: 12 August 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3929-1 Related CVEs: CVE-2014-9323 CVE-2017-6369 Upstream summary: It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could possibly use this issue with a specially crafted network […]
🟡 Medium ⏱ 10–30 min Last verified: 12 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4030-1 Related CVEs: CVE-2016-10321 CVE-2016-3952 CVE-2016-3953 CVE-2016-3954 CVE-2016-3957 Upstream summary: It was discovered that web2py does not properly check denied hosts before verifying passwords. An attacker could possibly use this […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16355 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 8 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4786-1 Related CVEs: CVE-2016-4055 CVE-2017-18214 Upstream summary: It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service. Table of […]
