ubuntu

Ubuntu 14.04 — eject — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — eject — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3246-1 Related CVEs: CVE-2017-6964 Upstream summary: Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as […]

Read more
Ubuntu 16.04 — root-system — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — root-system — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4801-1 Related CVEs: CVE-2017-1000203 Upstream summary: It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]

Read more
Ubuntu 14.04 — libxfont — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxfont — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3500-1 Related CVEs: CVE-2017-16611 CVE-2017-13720 CVE-2017-13722 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 CVE-2014-0209 CVE-2014-0210  +1 more Upstream summary: It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-304 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-304 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3240-1 Related CVEs: CVE-2017-0318 CVE-2016-8826 CVE-2016-7382 CVE-2016-7389 CVE-2015-7869 CVE-2015-5950 CVE-2014-8091 CVE-2014-8098  +1 more Upstream summary: It was discovered that the NVIDIA graphics drivers contained a flaw in the kernel mode […]

Read more
Ubuntu 14.04 — exempi — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — exempi — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3668-1 Related CVEs: CVE-2017-18233 CVE-2017-18234 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7729 CVE-2018-7730 CVE-2018-7731 Upstream summary: It was discovered that Exempi incorrectly handled certain media files. If a user or automated system were […]

Read more
Ubuntu 14.04 — sleuthkit — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — sleuthkit — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4765-1 Related CVEs: CVE-2012-5619 CVE-2017-13755 Upstream summary: It was discovered that The Sleuth Kit did not properly handle certain entires in FAT file systems. An attacker could use this vulnerability […]

Read more
Ubuntu 16.04 — collectd — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — collectd — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 3 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4793-1 Related CVEs: CVE-2016-6254 CVE-2017-16820 CVE-2017-7401 Upstream summary: It was discovered that collectd mishandled certain malformed packets. A remote attacker could use this vulnerability to cause collectd to crash or […]

Read more
Ubuntu 16.04 — libmwaw — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libmwaw — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3319-1 Related CVEs: CVE-2017-9433 Upstream summary: It was discovered that libmwaw incorrectly handled certain malformed document files. If a user or automated system were tricked into opening a specially crafted […]

Read more
Ubuntu 14.04 — mongodb — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — mongodb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8064-1 Related CVEs: CVE-2018-20802 Upstream summary: Eliot Horowitz discovered that MongoDB may fail to validate some instances of malformed BSON. A remote attacker could possibly use this issue to cause […]

Read more
Ubuntu 16.04 — uw-imap — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — uw-imap — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4160-1 Related CVEs: CVE-2018-19518 Upstream summary: It was discovered that UW IMAP incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands. Table of […]

Read more
CHAT