8,464 results · Feed
-
High max 7.5USN-3201-1 1 CVE
bind9 vulnerabilities
It was discovered that Bind incorrectly handled rewriting certain query responses when using both DNS64 and RPZ. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
first Feb 16, 2017 -
UnscoredUSN-3183-1 6 CVEs
gnutls26, gnutls28 vulnerabilities
Stefan Buehler discovered that GnuTLS incorrectly verified the serial length of OCSP responses. A remote attacker could possibly use this issue to bypass certain certificate validation measures. This issue only applied to Ubuntu 16.04 LTS. (CVE-2016-7444) Shi…
first Feb 1, 2017 -
UnscoredUSN-3191-1 13 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Feb 6, 2017 -
UnscoredUSN-3189-1 2 CVEs
linux, linux-raspi2, linux-snapdragon vulnerabilities
Mikulas Patocka discovered that the asynchronous multibuffer cryptographic daemon (mcryptd) in the Linux kernel did not properly handle being invoked with incompatible algorithms. A local attacker could use this to cause a denial of service (system crash). (C…
first Feb 3, 2017 -
UnscoredUSN-3220-1 1 CVE
linux, linux-gke, linux-raspi2, linux-snapdragon vulnerability
Alexander Popov discovered that the N_HDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges.
first Mar 8, 2017 -
UnscoredUSN-3217-1 0 CVEs
network-manager-applet vulnerability
Frederic Bardy and Quentin Biguenet discovered that network-manager-applet incorrectly checked permissions when connecting to certain wireless networks. A local attacker could use this issue at the login screen to access local files.
first Mar 7, 2017 -
UnscoredUSN-3211-1 10 CVEs
php7.0 vulnerabilities
It was discovered that PHP incorrectly handled certain invalid objects when unserializing data. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-7479) It was discover…
first Feb 23, 2017 -
High max 7.5USN-3222-1 10 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly …
first Mar 8, 2017 -
UnscoredUSN-3180-1 15 CVEs
oxide-qt vulnerabilities
Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting (XSS) attacks, read uninitialized memory, obtain sensitive info…
first Feb 8, 2017 -
UnscoredUSN-3184-1 6 CVEs
irssi vulnerabilities
It was discovered that the Irssi buf.pl script set incorrect permissions. A local attacker could use this issue to retrieve another user's window contents. (CVE-2016-7553) Joseph Bisch discovered that Irssi incorrectly handled comparing nicks. A remote attack…
first Feb 1, 2017 -
UnscoredUSN-3216-1 25 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass same origin restrictions, obtain sensitive information, spoof the addressbar, spoof th…
first Mar 7, 2017 -
UnscoredUSN-3183-2 1 CVE
gnutls26 vulnerability
USN-3183-1 fixed CVE-2016-8610 in GnuTLS in Ubuntu 16.04 LTS and Ubuntu 16.10. This update provides the corresponding update for Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. Original advisory details: Stefan Buehler discovered that GnuTLS incorrectly verified the s…
first Mar 20, 2017 -
High max 7.8USN-3182-1 1 CVE
ntfs-3g vulnerability
Jann Horn discovered that NTFS-3G incorrectly filtered environment variables when using the modprobe utility. A local attacker could possibly use this issue to load arbitrary kernel modules.
first Feb 1, 2017 -
UnscoredUSN-3197-1 1 CVE
libgc vulnerability
Kuang-che Wu discovered that multiple integer overflow vulnerabilities existed in libgc. An attacker could use these to cause a denial of service (application crash) or possibly execute arbitrary code.
first Feb 15, 2017 -
UnscoredUSN-3175-2 0 CVEs
firefox regression
USN-3175-1 fixed vulnerabilities in Firefox. The update caused a regression on systems where the AppArmor profile for Firefox is set to enforce mode. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple memory…
first Feb 6, 2017 -
UnscoredUSN-3196-1 10 CVEs
php5 vulnerabilities
It was discovered that PHP incorrectly handled certain arguments to the locale_get_display_name function. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-9912) It wa…
first Feb 14, 2017 -
UnscoredUSN-3173-1 1 CVE
nvidia-graphics-drivers-304 and nvidia-graphics-drivers-340 vulnerability
It was discovered that the NVIDIA graphics drivers contained a flaw in the kernel mode layer. A local attacker could use this issue to cause a denial of service.
first Jan 18, 2017 -
Medium max 5.5USN-3181-1 6 CVEs
openssl vulnerabilities
Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubu…
first Jan 31, 2017 -
UnscoredUSN-3176-1 1 CVE
pcsc-lite vulnerability
Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to crash, resulting in a denial of service, or possibly execute arbitrary code with root privileges.
first Jan 23, 2017 -
UnscoredUSN-3188-1 1 CVE
linux vulnerability
Andrey Konovalov discovered that the SCTP implementation in the Linux kernel improperly handled validation of incoming data. A remote attacker could use this to cause a denial of service (system crash).
first Feb 3, 2017 -
UnscoredUSN-3175-1 21 CVEs
firefox vulnerabilities
Multiple memory safety issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-53…
first Jan 27, 2017 -
UnscoredUSN-3185-1 1 CVE
libxpm vulnerability
It was discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could use this issue to cause libXpm to crash, resulting in a denial of service, or po…
first Feb 1, 2017 -
High max 8.8
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Jan 10, 2017 -
UnscoredUSN-3165-1 16 CVEs
thunderbird vulnerabilities
Multiple memory safety issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-201…
first Jan 28, 2017 -
Medium max 5.3USN-3163-1 3 CVEs
nss vulnerabilities
It was discovered that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause NSS to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubunt…
first Jan 4, 2017 -
High max 8.1USN-3158-1 3 CVEs
samba vulnerabilities
Frederic Besler and others discovered that the ndr_pull_dnsp_nam function in Samba contained an integer overflow. An authenticated attacker could use this to gain administrative privileges. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubun…
first Dec 19, 2016 -
UnscoredUSN-3156-1 1 CVE
apt vulnerability
Jann Horn discovered that APT incorrectly handled InRelease files. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages.
first Dec 13, 2016 -
UnscoredUSN-3160-1 2 CVEs
linux vulnerabilities
CAI Qian discovered that shared bind mounts in a mount namespace exponentially added entries without restriction to the Linux kernel's mount table. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6213) It was discovered …
first Dec 20, 2016 -
UnscoredUSN-4087-1 1 CVE
BWA vulnerability
It was discovered that Burrows-Wheeler Aligner (BWA) mishandled certain crafted .alt files. An attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code.
first Aug 6, 2019 -
UnscoredUSN-3164-1 1 CVE
exim4 vulnerability
Bjoern Jacke discovered that Exim incorrectly handled DKIM keys. In certain configurations, private DKIM signing keys could be leaked to the log files.
first Jan 5, 2017 -
UnscoredUSN-3161-1 7 CVEs
linux vulnerabilities
Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2015-8964) It was discovered that the Video For Linux Two…
first Dec 20, 2016 -
UnscoredUSN-3149-1 1 CVE
linux vulnerability
Philip Pettersson discovered a race condition in the af_packet implementation in the Linux kernel. A local unprivileged attacker could use this to cause a denial of service (system crash) or run arbitrary code with administrative privileges.
first Dec 5, 2016 -
UnscoredUSN-3146-1 4 CVEs
linux vulnerabilities
It was discovered that the __get_user_asm_ex implementation in the Linux kernel for x86/x86_64 contained extended asm statements that were incompatible with the exception table. A local attacker could use this to gain administrative privileges. (CVE-2016-9644…
first Nov 30, 2016 -
UnscoredUSN-3151-1 1 CVE
linux vulnerability
Philip Pettersson discovered a race condition in the af_packet implementation in the Linux kernel. A local unprivileged attacker could use this to cause a denial of service (system crash) or run arbitrary code with administrative privileges.
first Dec 5, 2016 -
UnscoredUSN-3171-1 2 CVEs
libvncserver vulnerabilities
Josef Gajdusek discovered that the LibVNCServer client library incorrectly handled certain FrameBufferUpdate messages. If a user were tricked into connecting to a malicious server, an attacker could use this issue to cause a denial of service, or possibly exe…
first Jan 11, 2017 -
UnscoredUSN-3145-1 2 CVEs
linux vulnerabilities
Marco Grassi discovered that the driver for Areca RAID Controllers in the Linux kernel did not properly validate control messages. A local attacker could use this to cause a denial of service (system crash) or possibly gain privileges. (CVE-2016-7425) Daxing …
first Nov 30, 2016 -
UnscoredUSN-3172-1 3 CVEs
bind9 vulnerabilities
It was discovered that Bind incorrectly handled certain malformed responses to an ANY query. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2016-9131) It was discovered that Bind incorrectly hand…
first Jan 12, 2017 -
UnscoredUSN-3153-1 17 CVEs
oxide-qt vulnerabilities
Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting (XSS) attacks, read uninitialized memory, obtain sensitive info…
first Dec 9, 2016 -
UnscoredUSN-3142-1 5 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly …
first Nov 30, 2016 -
UnscoredUSN-3135-2 0 CVEs
gst-plugins-good0.10, gst-plugins-good1.0 vulnerability
USN-3135-1 fixed a vulnerability in GStreamer Good Plugins. The original security fix was incomplete. This update fixes the problem. Original advisory details: Chris Evans discovered that GStreamer Good Plugins did not correctly handle malformed FLC movie fil…
first Nov 28, 2016