ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 8 February 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4804-1 Related CVEs: CVE-2017-10689 CVE-2017-2295 Upstream summary: It was discovered that Puppet installed modules with world writable permissions. An attacker could use this vulnerability to execute arbitrary code or cause […]

🟠 High   ⏱ 15–60 min  Last verified: 3 February 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4587-1 Related CVEs: CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 CVE-2016-9941 CVE-2016-9942 CVE-2018-15127  +11 more Upstream summary: Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return […]

🟠 High   ⏱ 15–60 min  Last verified: 1 February 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3231-1 Related CVEs: CVE-2017-2640 CVE-2016-2365 CVE-2016-2366 CVE-2016-2367 CVE-2016-2368 CVE-2016-2369 CVE-2016-2370 CVE-2016-2371  +12 more Upstream summary: Joseph Bisch discovered that Pidgin incorrectly handled certain xml messages. A remote attacker could use […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3842-1 Related CVEs: CVE-2018-4700 CVE-2017-18248 CVE-2018-4180 CVE-2018-4181 CVE-2018-6553 CVE-2017-18190 https://launchpad.net/bugs/1505328 CVE-2015-1158  +6 more Upstream summary: Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3563-1 Related CVEs: CVE-2018-5950 CVE-2016-6893 CVE-2016-7123 CVE-2015-2775 Upstream summary: It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3503-1 Related CVEs: CVE-2017-1000159 CVE-2017-1000083 Upstream summary: It was discovered that Evince incorrectly handled printing certain DVI files. If a user were tricked into opening and printing a specially-named DVI […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4855-1 Related CVEs: CVE-2018-8768 Upstream summary: It was discovered that IPython did not properly sanitize certain input. If a user were tricked into opening a specially crafted notebook file, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3246-1 Related CVEs: CVE-2017-6964 Upstream summary: Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3224-1 Related CVEs: CVE-2017-5985 CVE-2016-8649 Upstream summary: Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5742-1 Related CVEs: CVE-2017-9937 CVE-2013-6369 Upstream summary: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into […]