Ubuntu 16.04

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4824-1 Related CVEs: CVE-2017-8807 Upstream summary: It was discovered that Varnish incorrectly handled certain inputs. A remote attacker could possibly use this issue to obtain sensitive information. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4811-1 Related CVEs: CVE-2017-14107 Upstream summary: It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3081-2 Related CVEs: CVE-2016-1240 CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Upstream summary: Dawid Golunski discovered that the Tomcat init script incorrectly handled creating log files. A remote attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4803-1 Related CVEs: CVE-2017-1000421 CVE-2017-18120 Upstream summary: It was discovered that Gifsicle did not properly handle certain input. If a user were tricked into opening a malicious GIF, an attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3026-2 Related CVEs: CVE-2016-5104 Upstream summary: It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to […]

🟠 High   ⏱ 15–60 min  Last verified: 9 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4843-1 Related CVEs: CVE-2014-9218 CVE-2016-6609 CVE-2016-6619 CVE-2016-6630 CVE-2016-9849 CVE-2016-9866 CVE-2017-18264 CVE-2017-1000014  +12 more Upstream summary: Javier Nieto and Andres Rojas discovered that phpMyAdmin incorrectly managed input in the form of […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3825-1 Related CVEs: CVE-2011-2767 Upstream summary: Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used by unprivileged users, contrary to the documentation. A local attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3255-1 Related CVEs: CVE-2017-7358 Upstream summary: It was discovered that LightDM incorrectly handled home directory creation for guest users. A local attacker could use this issue to gain ownership of […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4777-1 Related CVEs: CVE-2015-8860 Upstream summary: It was discovered that node-tar mishandled certain tar archives. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4816-1 Related CVEs: CVE-2017-17446 Upstream summary: It was discovered that game-music-emu mishandled certain crafted input. A remote attacker could use this vulnerability to cause game-music-emu to crash. Table of contents […]