Ubuntu 14.04 LTS

🟡 Medium   ⏱ 10–30 min  Last verified: 29 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4792-1 Related CVEs: CVE-2016-5404 CVE-2016-7030 CVE-2016-9575 Upstream summary: It was discovered that FreeIPA incorrectly handled certificates. An attacker could possibly use this issue to cause a denial of service by […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3122-1 Related CVEs: CVE-2016-7382 CVE-2016-7389 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2876-1 Related CVEs: CVE-2016-1572 CVE-2014-9687 Upstream summary: Jann Horn discovered that mount.ecryptfs_private would mount over certain directories in the proc filesystem. A local attacker could use this to escalate their […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3063-1 Related CVEs: CVE-2016-5384 Upstream summary: Tobias Stoeckmann discovered that Fontconfig incorrectly handled cache files. A local attacker could possibly use this issue with a specially crafted cache file to […]

🟠 High   ⏱ 15–60 min  Last verified: 4 September 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3053-1 Related CVEs: CVE-2016-1237 CVE-2016-4470 CVE-2016-4794 CVE-2016-5243 CVE-2016-3070 CVE-2016-4482 CVE-2016-4569 CVE-2016-4578  +12 more Upstream summary: A missing permission check when settings ACLs was discovered in nfsd. A local user could […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3074-1 Related CVEs: CVE-2016-7162 https://launchpad.net/bugs/1171236 Upstream summary: It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3401-1 Related CVEs: CVE-2016-10243 Upstream summary: It was discovered that TeX Live incorrectly handled certain system commands. If a user were tricked into processing a specially crafted TeX file, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4790-1 Related CVEs: CVE-2016-5301 Upstream summary: It was discovered that libtorrent incorrectly handled chunked headers. A remote attacker could possibly use this to cause a crash resulting in a denial […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3026-1 Related CVEs: CVE-2016-5104 Upstream summary: It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3463-1 Related CVEs: CVE-2016-10516 Upstream summary: It was discovered that Werkzeug did not properly handle certain web scripts. A remote attacker could use this to inject arbitrary code via a […]