8,464 results · Feed
-
UnscoredUSN-3240-1 1 CVE
nvidia-graphics-drivers-304, nvidia-graphics-drivers-340, nvidia-graphics-drivers-375 vulnerability
It was discovered that the NVIDIA graphics drivers contained a flaw in the kernel mode layer. A local attacker could use this issue to cause a denial of service.
first Mar 21, 2017 -
UnscoredUSN-3241-1 13 CVEs
audiofile vulnerabilities
Agostino Sarubbo discovered that audiofile incorrectly handled certain malformed audio files. If a user or automated system were tricked into processing a specially crafted audio file, a remote attacker could cause applications linked against audiofile to cra…
first Mar 22, 2017 -
UnscoredUSN-3247-1 1 CVE
apparmor vulnerability
Stéphane Graber discovered that AppArmor incorrectly unloaded some profiles when restarted or upgraded, contrary to expected behavior.
first Mar 28, 2017 -
UnscoredUSN-3245-1 5 CVEs
gst-plugins-good0.10, gst-plugins-good1.0 vulnerabilities
Hanno Böck discovered that GStreamer Good Plugins did not correctly handle certain malformed media files. If a user were tricked into opening a crafted media file with a GStreamer application, an attacker could cause a denial of service via application crash.
first Mar 27, 2017 -
UnscoredUSN-3242-1 1 CVE
samba vulnerability
Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories.
first Mar 23, 2017 -
UnscoredUSN-3265-1 10 CVEs
linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-7374) Andrey Konovalov discovered an out-of-bounds access i…
first Apr 25, 2017 -
UnscoredUSN-3263-1 1 CVE
freetype vulnerability
It was discovered that a heap-based buffer overflow existed in the FreeType library. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, resulting in a denial of service, or possibly execute arbitr…
first Apr 21, 2017 -
UnscoredUSN-3260-2 0 CVEs
firefox regression
USN-3260-1 fixed vulnerabilities in Firefox. The update caused the date picker panel and form validation errors to close immediately on opening. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security is…
first May 11, 2017 -
UnscoredUSN-3244-1 5 CVEs
gst-plugins-base0.10, gst-plugins-base1.0 vulnerabilities
Hanno Böck discovered that GStreamer Base Plugins did not correctly handle certain malformed media files. If a user were tricked into opening a crafted media file with a GStreamer application, an attacker could cause a denial of service via application crash.
first Mar 27, 2017 -
UnscoredUSN-3264-1 1 CVE
linux vulnerability
Alexander Popov discovered that a race condition existed in the Stream Control Transmission Protocol (SCTP) implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash).
first Apr 24, 2017 -
UnscoredUSN-3233-1 9 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to bypass same origin restrictions, obtain sensitive information, caus…
first Mar 24, 2017 -
UnscoredUSN-3257-1 34 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Apr 10, 2017 -
High max 7.5USN-3259-1 3 CVEs
bind9 vulnerabilities
It was discovered that the resolver in Bind made incorrect assumptions about ordering when processing responses containing a CNAME or DNAME. An attacker could use this cause a denial of service. (CVE-2017-3137) Oleg Gorokhov discovered that in some situations…
first Apr 17, 2017 -
High max 8.8
oxide-qt vulnerabilities
Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, spoof application UI by causing the security status API or web…
first Mar 29, 2017 -
UnscoredUSN-3228-1 3 CVEs
libevent vulnerabilities
Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code.
first Mar 13, 2017 -
UnscoredUSN-3227-1 5 CVEs
icu vulnerabilities
It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of …
first Mar 13, 2017 -
UnscoredUSN-3239-1 9 CVEs
eglibc, glibc vulnerabilities
It was discovered that the GNU C Library incorrectly handled the strxfrm() function. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-89…
first Mar 21, 2017 -
UnscoredUSN-3216-2 0 CVEs
firefox regression
USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in a startup crash when Firefox is used with XRDP. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firef…
first Mar 30, 2017 -
UnscoredUSN-3223-1 1 CVE
kde4libs vulnerability
Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs incorrectly handled certain PAC files. A remote attacker could possibly use this issue to obtain sensitive information.
first Mar 9, 2017 -
Critical max 9.8USN-3235-1 3 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled format strings. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to crash, resulting in a denial of service. This issue only affec…
first Mar 16, 2017 -
UnscoredUSN-3239-2 0 CVEs
eglibc, glibc regression
USN-3239-1 fixed vulnerabilities in the GNU C Library. Unfortunately, the fix for CVE-2015-5180 introduced an internal ABI change within the resolver library. This update reverts the change. We apologize for the inconvenience. Please note that long-running se…
first Mar 21, 2017 -
UnscoredUSN-3225-1 7 CVEs
libarchive vulnerabilities
It was discovered that libarchive incorrectly handled hardlink entries when extracting archives. A remote attacker could possibly use this issue to overwrite arbitrary files. (CVE-2016-5418) Christian Wressnegger, Alwin Maier, and Fabian Yamaguchi discovered …
first Mar 9, 2017 -
UnscoredUSN-3232-1 3 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly …
first Mar 14, 2017 -
UnscoredUSN-3237-1 1 CVE
freetype vulnerability
It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, resulting in a denial of service, or possibly execute arbi…
first Mar 20, 2017 -
UnscoredUSN-3238-1 1 CVE
firefox vulnerability
An integer overflow was discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cause a denial of service via application crash or execute arbitrary code. (CVE-2017-5428)
first Mar 20, 2017 -
UnscoredUSN-3212-2 0 CVEs
tiff regression
USN-3212-1 fixed vulnerabilities in LibTIFF. Unfortunately, some of the security patches were misapplied, which caused a regression when processing certain images. This update fixes the problem. We apologize for the inconvenience. Original advisory details: I…
first May 30, 2017 -
UnscoredUSN-3213-1 7 CVEs
libgd2 vulnerabilities
Stefan Esser discovered that the GD library incorrectly handled memory when processing certain images. If a user or automated system were tricked into processing a specially crafted image, an attacker could cause a denial of service, or possibly execute arbit…
first Feb 28, 2017 -
High max 7.5USN-3231-1 1 CVE
pidgin vulnerability
Joseph Bisch discovered that Pidgin incorrectly handled certain xml messages. A remote attacker could use this issue to cause Pidgin to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 14, 2017 -
UnscoredUSN-4529-1 2 CVEs
freeimage vulnerabilities
It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. (CVE-2019…
first Sep 22, 2020 -
UnscoredUSN-3224-1 1 CVE
lxc vulnerability
Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create virtual network interfaces in network namespaces that they do not own.
first Mar 9, 2017 -
UnscoredUSN-3234-1 2 CVEs
linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access could use this to specially craft an ext4 image that causes a denial of service (system crash). (CVE-2016…
first Mar 15, 2017 -
UnscoredUSN-3219-1 1 CVE
linux vulnerability
Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges.
first Mar 7, 2017 -
High max 7.5USN-3202-1 2 CVEs
spice vulnerabilities
Frediano Ziglio discovered that Spice incorrectly handled certain client messages. A remote attacker could use this issue to cause Spice to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 20, 2017 -
UnscoredUSN-3211-2 0 CVEs
php7.0 regression
USN-3211-1 fixed vulnerabilities in PHP by updating to the new 7.0.15 upstream release. PHP 7.0.15 introduced a regression when using MySQL with large blobs. This update fixes the problem with a backported fix. Original advisory details: It was discovered tha…
first Mar 2, 2017 -
UnscoredUSN-3210-1 1 CVE
LibreOffice vulnerability
Ben Hayak discovered that it was possible to make LibreOffice Calc and Writer disclose arbitrary files to an attacker if a user opened a specially crafted file with embedded links.
first Feb 23, 2017 -
UnscoredUSN-3207-1 3 CVEs
linux vulnerabilities
It was discovered that a use-after-free vulnerability existed in the block device layer of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2016-7910) Dmitry Vyukov …
first Feb 22, 2017 -
UnscoredUSN-3200-1 12 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Feb 16, 2017 -
UnscoredUSN-3193-1 1 CVE
nettle vulnerability
It was discovered that Nettle incorrectly mitigated certain timing side-channel attacks. A remote attacker could possibly use this flaw to recover private keys.
first Feb 6, 2017 -
UnscoredUSN-3208-1 7 CVEs
linux, linux-snapdragon vulnerabilities
It was discovered that the generic SCSI block layer in the Linux kernel did not properly restrict write operations in certain situations. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (…
first Feb 22, 2017 -
UnscoredUSN-3203-1 2 CVEs
gtk-vnc vulnerabilities
It was discovered that gtk-vnc incorrectly validated certain data. A malicious server could use this issue to cause gtk-vnc to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 20, 2017