🟢 Low ⏱ 5–15 min Last verified: 5 August 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16613 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 5 August 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3319-1 Related CVEs: CVE-2017-9433 Upstream summary: It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3197-1 Related CVEs: CVE-2016-9427 Upstream summary: Kuang-che Wu discovered that multiple integer overflow vulnerabilities existed in libgc. An attacker could use these to cause a denial of service (application crash) […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4771-1 Related CVEs: CVE-2014-8126 CVE-2017-16816 Upstream summary: It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue only […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4822-1 Related CVEs: CVE-2017-6369 Upstream summary: It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service (crash) or […]
🟢 Low ⏱ 5–15 min Last verified: 30 July 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-10807 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 29 July 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4806-1 Related CVEs: CVE-2017-12839 CVE-2017-12797 CVE-2017-9545 CVE-2017-11126 Upstream summary: It was discovered that mpg123 failed to handle certain malformed mp3 files. An attacker could use this vulnerability to potentially leak […]
🟢 Low ⏱ 5–15 min Last verified: 25 July 2017 Affected versions: Debian 9 (stretch) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18076 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟢 Low ⏱ 5–15 min Last verified: 25 July 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4776-1 Related CVEs: CVE-2015-8855 Upstream summary: It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service. Table […]
🔴 Critical ⏱ 15–90 min Last verified: 25 July 2017 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2017-15631 Upstream summary: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file. Table […]
