8,464 results · Feed
-
UnscoredUSN-2747-1 1 CVE
nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-346, nvidia-graphics-drivers-346-updates, jockey vulnerability
Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root privileges.
first Sep 28, 2015 -
UnscoredUSN-2743-4 0 CVEs
firefox regression
USN-2743-1 fixed vulnerabilities in Firefox. After upgrading, some users reported problems with bookmark creation and crashes in some circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Andrew Osmond, O…
first Oct 5, 2015 -
UnscoredUSN-2743-1 21 CVEs
firefox vulnerabilities
Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight, Cameron McCormack, Bob Clary and Randell Jesup discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted websit…
first Sep 22, 2015 -
UnscoredUSN-2748-1 2 CVEs
linux vulnerabilities
Benjamin Randazzo discovered an information leak in the md (multiple device) driver when the bitmap_info.file is disabled. A local privileged attacker could use this to obtain sensitive information from the kernel. (CVE-2015-5697) Marc-André Lureau discovered…
first Sep 28, 2015 -
UnscoredUSN-2741-1 1 CVE
unity-settings-daemon vulnerability
It was discovered that the Unity Settings Daemon incorrectly allowed removable media to be mounted when the screen is locked. If a vulnerability were discovered in some other desktop component, such as an image library, a local attacker could possibly use thi…
first Sep 16, 2015 -
UnscoredUSN-2761-1 1 CVE
linux vulnerability
Dmitry Vyukov discovered that the Linux kernel did not properly initialize IPC object state in certain situations. A local attacker could use this to escalate their privileges, expose confidential information, or cause a denial of service (system crash).
first Oct 5, 2015 -
UnscoredUSN-2742-1 2 CVEs
openldap vulnerabilities
Denis Andzakovic discovered that OpenLDAP incorrectly handled certain BER data. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. (CVE-2015-6908) Dietrich Clauss discovered that the OpenLDAP package …
first Sep 16, 2015 -
UnscoredUSN-2740-1 3 CVEs
icu vulnerabilities
Atte Kettunen discovered that ICU incorrectly handled certain converter names. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash. (CVE-2015-1270) It was discovered that ICU incorrectly handled certain memor…
first Sep 16, 2015 -
UnscoredUSN-2771-1 1 CVE
click vulnerability
It was discovered that click did not properly perform input sanitization during click package installation. If a user were tricked into installing a crafted click package, a remote attacker could exploit this to escalate privileges by tricking click into inst…
first Oct 15, 2015 -
UnscoredUSN-2736-1 1 CVE
spice vulnerability
Frediano Ziglio discovered that Spice incorrectly handled monitor configs. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, w…
first Sep 8, 2015 -
UnscoredUSN-2739-1 1 CVE
freetype vulnerabilities
It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expo…
first Sep 10, 2015 -
UnscoredUSN-2722-1 1 CVE
gdk-pixbuf vulnerability
Gustavo Grieco discovered that GDK-PixBuf incorrectly handled scaling bitmap images. If a user or automated system were tricked into opening a BMP image file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service…
first Aug 26, 2015 -
UnscoredUSN-2730-1 2 CVEs
openslp-dfsg vulnerabilities
Georgi Geshev discovered that OpenSLP incorrectly handled processing certain service requests. A remote attacker could possibly use this issue to cause OpenSLP to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14…
first Sep 3, 2015 -
UnscoredUSN-2728-1 1 CVE
bind9 vulnerability
Hanno Böck discovered that Bind incorrectly handled certain malformed keys when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service.
first Sep 2, 2015 -
UnscoredUSN-2729-1 3 CVEs
libvdpau vulnerabilities
Florian Weimer discovered that libvdpau incorrectly handled certain environment variables. A local attacker could possibly use this issue to gain privileges.
first Sep 3, 2015 -
UnscoredUSN-2723-1 2 CVEs
firefox vulnerabilities
A use-after-free was discovered when resizing a canvas element during restyling in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application cr…
first Aug 27, 2015 -
UnscoredUSN-2734-1 1 CVE
linux vulnerability
It was discovered that an integer overflow error existed in the SCSI generic (sg) driver in the Linux kernel. A local attacker with write permission to a SCSI generic device could use this to cause a denial of service (system crash) or potentially escalate th…
first Sep 3, 2015 -
UnscoredUSN-2721-1 7 CVEs
subversion vulnerabilities
It was discovered that the Subversion mod_dav_svn module incorrectly handled REPORT requests for a resource that does not exist. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ub…
first Aug 20, 2015 -
UnscoredUSN-2716-1 1 CVE
linux vulnerability
Marcelo Ricardo Leitner discovered a race condition in the Linux kernel's SCTP address configuration lists when using Address Configuration Change (ASCONF) options on a socket. An unprivileged local user could exploit this flaw to cause a denial of service (s…
first Aug 18, 2015 -
UnscoredUSN-2712-1 5 CVEs
thunderbird vulnerabilities
Gary Kwong, Christian Holler, and Byron Campen discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application …
first Aug 25, 2015 -
UnscoredUSN-2695-1 2 CVEs
tidy vulnerabilities
Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications linked against HTML Tidy could be made to crash, leading to a denial of service, or possibly e…
first Jul 29, 2015 -
High max 8.8
firefox vulnerability
Cody Crews discovered a way to violate the same-origin policy to inject script in to a non-privileged part of the PDF viewer. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to read sensitive information from l…
first Aug 7, 2015 -
UnscoredUSN-2702-1 17 CVEs
firefox vulnerabilities
Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley, Chris Coulson, and Eric Rahm discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit th…
first Aug 11, 2015 -
UnscoredUSN-2669-1 1 CVE
bind9 vulnerability
Breno Silveira Soares discovered that Bind incorrectly handled certain zone data when configured to perform DNSSEC validation. A remote attacker could use this issue with specially crafted zone data to cause Bind to crash, resulting in a denial of service.
first Jul 7, 2015 -
High max 7.5USN-2711-1 2 CVEs
net-snmp vulnerabilities
It was discovered that Net-SNMP incorrectly handled certain trap messages when the -OQ option was used. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service. (CVE-2014-3565) Qinghao Tang discovered that Net-SNMP …
first Aug 17, 2015 -
UnscoredUSN-2663-1 6 CVEs
linux vulnerabilities
Alexandre Oliva reported a race condition flaw in the btrfs file system's handling of extended attributes (xattrs). A local attacker could exploit this flaw to bypass ACLs and potentially escalate privileges. (CVE-2014-9710) A race condition was discovered in…
first Jul 7, 2015 -
UnscoredUSN-2699-1 1 CVE
hplip vulnerability
Enrico Zini discovered that HPLIP used a short GPG key ID when downloading keys from the keyserver. An attacker could possibly use this to return a different key with a duplicate short key id and perform a machine-in-the-middle attack on printer plugin instal…
first Jul 30, 2015 -
UnscoredUSN-2658-1 19 CVEs
php5 vulnerabilities
Neal Poole and Tomas Hoger discovered that PHP incorrectly handled NULL bytes in file paths. A remote attacker could possibly use this issue to bypass intended restrictions and create or obtain access to sensitive files. (CVE-2015-3411, CVE-2015-3412, CVE-201…
first Jul 6, 2015 -
UnscoredUSN-2700-1 3 CVEs
linux vulnerabilities
Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs (non-maskable interrupts). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-3290)…
first Jul 31, 2015 -
UnscoredUSN-2694-1 5 CVEs
pcre3 vulnerabilities
Michele Spagnuolo discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using PCRE to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only aff…
first Jul 29, 2015 -
UnscoredUSN-2688-1 4 CVEs
linux vulnerabilities
Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs (non-maskable interrupts). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-3290)…
first Jul 28, 2015 -
UnscoredUSN-2629-1 2 CVEs
cups vulnerabilities
It was discovered that CUPS incorrectly handled reference counting when handling localized strings. A remote attacker could use this issue to escalate permissions, upload a replacement CUPS configuration file, and execute arbitrary code. (CVE-2015-1158) It wa…
first Jun 10, 2015 -
UnscoredUSN-2670-1 4 CVEs
libwmf vulnerabilities
Fernando Muñoz and Stefan Cornelius discovered that libwmf incorrectly handled certain malformed images. If a user or automated system were tricked into opening a crafted image file, an attacker could cause a denial of service or execute arbitrary code with p…
first Jul 8, 2015 -
UnscoredUSN-2697-1 1 CVE
ghostscript vulnerability
William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execu…
first Jul 30, 2015 -
UnscoredUSN-2702-3 0 CVEs
firefox regression
USN-2702-1 fixed vulnerabilities in Firefox. After upgrading, some users in the US reported that their default search engine switched to Yahoo. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Gary Kwong, Christian…
first Aug 20, 2015 -
UnscoredUSN-2681-1 6 CVEs
linux vulnerabilities
A flaw was discovered in the user space memory copying for the pipe iovecs in the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or potentially escalate their privileges. (CVE-2015-1805) A flaw was…
first Jul 23, 2015 -
UnscoredUSN-2624-1 0 CVEs
openssl update
As a security improvement, this update removes the export cipher suites from the default cipher list to prevent their use in possible downgrade attacks.
first Jun 1, 2015 -
UnscoredUSN-2686-1 2 CVEs
apache2 vulnerabilities
It was discovered that the Apache HTTP Server incorrectly parsed chunk headers. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks. (CVE-2015-3183) It was discovered that the Apache HTTP Server incorrectly handled the ap…
first Jul 27, 2015 -
UnscoredUSN-2672-1 2 CVEs
nss vulnerabilities
Karthikeyan Bhargavan discovered that NSS incorrectly handled state transitions for the TLS state machine. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to skip the ServerKeyExchange message and remove …
first Jul 9, 2015 -
UnscoredUSN-4079-1 4 CVEs
sox vulnerabilities
It was discovered that SoX incorrectly handled certain MP3 files. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-8354, CVE-2019-8355, CVE-2019-8356, CVE-2019-8357)
first Jul 30, 2019