🟢 Low ⏱ 5–15 min Last verified: 12 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2576-1 Related CVEs: https://launchpad.net/bugs/1447396 Upstream summary: Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Table of contents […]
🟠 High ⏱ 30–90 min Last verified: 2 June 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-4011, IBM Support Bulletin CVE: CVE-2013-4011 NVD summary: Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3623-1 Related CVEs: https://launchpad.net/bugs/1174007 Upstream summary: It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue. […]
🟢 Low ⏱ 5–15 min Last verified: 19 May 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2901-1 Related CVEs: CVE-2014-9765 Upstream summary: It was discovered that xdelta3 incorrectly handled certain files. If a user or automated system were tricked into processing a specially-crafted file, a remote […]
🟢 Low ⏱ 5–15 min Last verified: 10 May 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2473-1 Related CVEs: CVE-2009-4135 CVE-2014-9471 Upstream summary: It was discovered that the distcheck rule in dist-check.mk in GNU coreutils allows local users to gain privileges via a symlink attack on […]
🟢 Low ⏱ 10–30 min Last verified: 29 April 2014 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2014-4805, IBM Support Bulletin CVE: CVE-2014-4805 NVD summary: IBM DB2 10.5 before FP4 on Linux and AIX creates temporary files during CDE table LOAD operations, which allows local users to obtain sensitive […]
🟢 Low ⏱ 5–15 min Last verified: 27 April 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2292-1 Related CVEs: CVE-2014-3230 Upstream summary: It was discovered that the LWP::Protocol::https perl module incorrectly disabled peer certificate verification completely when only hostname verification was requested to be disabled. If […]
🟠 High ⏱ 30–90 min Last verified: 2 March 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-3005, IBM Support Bulletin CVE: CVE-2013-3005 NVD summary: The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to […]
🟡 Medium ⏱ 15–45 min Last verified: 19 February 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-0930, IBM Support Bulletin CVE: CVE-2014-0930 NVD summary: The ptrace system call in IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.2.x, allows local users to cause a denial of […]
🟡 Medium ⏱ 15–45 min Last verified: 29 November 2013 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-5419, IBM Support Bulletin CVE: CVE-2013-5419 NVD summary: Multiple buffer overflows in (1) mkque and (2) mkquedev in bos.rte.printers in IBM AIX 6.1 and 7.1 allow local users to gain […]
