Ubuntu 16.04

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4022-1 Related CVEs: CVE-2018-1000164 Upstream summary: It was discovered that gunicorn improperly handled certain input. An attacker could potentially use this issue execute a cross-site scripting (XSS) attack. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4057-1 Related CVEs: CVE-2019-13453 Upstream summary: Mike Salvatore discovered that Zipios mishandled certain malformed ZIP files. An attacker could use this vulnerability to cause a denial of service or consume […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4597-1 Related CVEs: CVE-2017-6807 CVE-2019-3877 CVE-2019-3878 Upstream summary: François Kooman discovered that mod_auth_mellon incorrectly handled cookies. An attacker could possibly use this issue to cause a Cross-Site Session Transfer attack. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5380-1 Related CVEs: CVE-2019-18276 CVE-2019-9924 CVE-2016-0634 CVE-2016-7543 CVE-2016-9401 CVE-2017-5932 Upstream summary: It was discovered that Bash did not properly drop privileges when the binary had the setuid bit enabled. An […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4400-1 Related CVEs: CVE-2019-3689 Upstream summary: It was discovered that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges. […]

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4229-1 Related CVEs: CVE-2018-12327 CVE-2018-7182 CVE-2018-7183 CVE-2018-7184 CVE-2018-7185 CVE-2016-2519 CVE-2016-7426 CVE-2016-7427  +12 more Upstream summary: It was discovered that ntpq and ntpdc incorrectly handled some arguments. An attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4100-1 Related CVEs: CVE-2016-6232 CVE-2019-14744 Upstream summary: It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3974-1 Related CVEs: CVE-2018-11099 CVE-2018-11129 CVE-2018-11130 Upstream summary: It was discovered that VCFtools improperly handled certain input. If a user was tricked into opening a crafted input file, VCFtools could […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5326-1 Related CVEs: CVE-2018-10906 Upstream summary: It was discovered that FUSE is susceptible to a restriction bypass flaw on a system that has SELinux active. A local attacker with non-root […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7465-1 Related CVEs: CVE-2018-16848 CVE-2018-16849 CVE-2019-3866 Upstream summary: It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a […]