Ubuntu 14.04 LTS

Ubuntu 14.04 — cacti — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — cacti — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6969-1 Related CVEs: CVE-2024-25641 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460  +1 more Upstream summary: It was discovered that Cacti did not properly apply checks to the "Package Import" feature. […]

Read more
Ubuntu 14.04 — libx11 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libx11 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6407-2 Related CVEs: CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2023-3138 CVE-2021-31535 CVE-2020-14344 CVE-2020-14363 CVE-2016-7942  +4 more Upstream summary: USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 […]

Read more
Ubuntu 14.04 — bind9 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — bind9 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7739-1 Related CVEs: CVE-2021-25215 CVE-2021-25216 CVE-2021-25214 CVE-2023-50387 CVE-2023-50868 CVE-2023-3341 CVE-2023-2828 CVE-2016-2775  +12 more Upstream summary: Greg Kuechle discovered that Bind incorrectly handled certain incremental zone updates. A remote attacker could […]

Read more
Ubuntu 14.04 — xrdp — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xrdp — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6474-1 Related CVEs: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483  +8 more Upstream summary: It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to […]

Read more
Ubuntu 14.04 — w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — w3m — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6580-1 Related CVEs: CVE-2023-4255 CVE-2022-38223 CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 CVE-2016-9422 CVE-2016-9423 CVE-2016-9424  +12 more Upstream summary: It was discovered that w3m incorrectly handled certain HTML files. An attacker could possibly use […]

Read more
Ubuntu 14.04 — tar — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — tar — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6543-1 Related CVEs: CVE-2023-39804 CVE-2022-48303 CVE-2021-20193 CVE-2018-20482 CVE-2019-9923 CVE-2016-6321 Upstream summary: It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could use this issue to […]

Read more
Ubuntu 14.04 — ncurses — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — ncurses — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6684-1 Related CVEs: CVE-2023-50495 CVE-2020-19189 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 CVE-2017-16879  +12 more Upstream summary: It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation […]

Read more
Ubuntu 14.04 — openssh — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — openssh — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6279-1 Related CVEs: https://launchpad.net/bugs/2030275 CVE-2023-38408 CVE-2019-6111 CVE-2018-20685 CVE-2019-6109 CVE-2016-10708 CVE-2018-15473 CVE-2016-10009  +12 more Upstream summary: It was discovered that OpenSSH has an observable discrepancy leading to an information leak in […]

Read more
Ubuntu 14.04 — traceroute — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — traceroute — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6478-1 Related CVEs: CVE-2023-46316 Upstream summary: It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to execute arbitrary commands. Table […]

Read more
Ubuntu 14.04 — debian-goodies — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — debian-goodies — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8109-1 Related CVEs: CVE-2023-27635 Upstream summary: Jakub Wilk discovered that debmany in Debian Goodies incorrectly handled certain deb files. An attacker could possibly use this issue to execute arbitrary shell […]

Read more
CHAT