8,466 results · Feed
-
UnscoredUSN-3427-1 1 CVE
emacs24 vulnerability
Charles A. Roelli discovered that Emacs incorrectly handled certain files. If a user were tricked into opening a specially crafted file (e.g., email messages in gnus), an attacker could possibly use this to execute arbitrary code.
first Sep 21, 2017 -
UnscoredUSN-3420-2 4 CVEs
linux-lts-xenial vulnerabilities
USN-3420-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that a buffer overflow exist…
first Sep 18, 2017 -
UnscoredUSN-3419-2 2 CVEs
linux-hwe vulnerabilities
USN-3419-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. It was discovered that a buffer overflow existed in th…
first Sep 18, 2017 -
Critical max 9.8USN-3415-1 90 CVEs
tcpdump vulnerabilities
Wilfried Kirsch discovered a buffer overflow in the SLIP decoder in tcpdump. A remote attacker could use this to cause a denial of service (application crash) or possibly execute arbitrary code. (CVE-2017-11543) Bhargava Shastry discovered a buffer overflow i…
first Sep 14, 2017 -
UnscoredUSN-3414-2 0 CVEs
qemu regression
USN-3414-1 fixed vulnerabilities in QEMU. The patch backport for CVE-2017-9375 was incomplete and caused a regression in the USB xHCI controller emulation support. This update fixes the problem. We apologize for the inconvenience. Original advisory details: L…
first Sep 20, 2017 -
UnscoredUSN-3414-1 13 CVEs
qemu vulnerabilities
Leo Gaspard discovered that QEMU incorrectly handled VirtFS access control. A guest attacker could use this issue to elevate privileges inside the guest. (CVE-2017-7493) Li Qiang discovered that QEMU incorrectly handled VMWare PVSCSI emulation. A privileged a…
first Sep 13, 2017 -
UnscoredUSN-3411-1 0 CVEs
bzr vulnerability
Adam Collard discovered that Bazaar did not properly handle host names in 'bzr+ssh://' URLs. A remote attacker could use this to construct a bazaar repository URL that when accessed could run arbitrary code with the privileges of the user.
first Sep 6, 2017 -
High max 7.5USN-3407-1 1 CVE
pyjwt vulnerability
It was discovered that a vulnerability in PyJWT doesn't check invalid_strings properly for some public keys. A remote attacker could take advantage of a key confusion to craft JWTs from scratch.
first Aug 30, 2017 -
UnscoredUSN-3404-2 1 CVE
linux-hwe vulnerability
USN-3404-1 fixed a vulnerability in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. A reference count bug was discovered in the Linux kern…
first Aug 28, 2017 -
High max 7.5USN-3402-1 1 CVE
python-pysaml2 vulnerability
It was discovered that PySAML2 incorrectly handled certain SAML XML requests and responses. A remote attacker could use this issue to read arbitrary files.
first Aug 24, 2017 -
UnscoredUSN-3401-1 1 CVE
texlive-base vulnerability
It was discovered that TeX Live incorrectly handled certain system commands. If a user were tricked into processing a specially crafted TeX file, a remote attacker could execute arbitrary code.
first Aug 22, 2017 -
UnscoredUSN-3399-1 1 CVE
cvs vulnerability
Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository that when accessed could run arbitrary code with the privileges of the user.
first Aug 21, 2017 -
High max 7.5USN-3397-1 1 CVE
strongswan vulnerability
It was discovered that strongSwan incorrectly handled verifying specific RSA signatures. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service.
first Aug 21, 2017 -
UnscoredUSN-3396-1 20 CVEs
openjdk-7 vulnerabilities
It was discovered that the JPEGImageReader class in OpenJDK would incorrectly read unused image data. An attacker could use this to specially construct a jpeg image file that when opened by a Java application would cause a denial of service. (CVE-2017-10053) …
first Aug 18, 2017 -
UnscoredUSN-3392-2 0 CVEs
linux-lts-xenial regression
USN-3392-1 fixed a regression in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. USN-3378-2 fixed vulnerabilities in the Linux Har…
first Aug 16, 2017 -
UnscoredUSN-3391-2 0 CVEs
ubufox update
USN-3391-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubufox. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacke…
first Aug 16, 2017 -
UnscoredUSN-3387-1 1 CVE
git vulnerability
Brian Neel, Joern Schneeweisz, and Jeff King discovered that Git did not properly handle host names in 'ssh://' URLs. A remote attacker could use this to construct a git repository that when accessed could run arbitrary code with the privileges of the user.
first Aug 11, 2017 -
UnscoredUSN-3385-2 2 CVEs
linux-lts-xenial vulnerabilities
USN-3385-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Andrey Konovalov discovered a race condition i…
first Aug 11, 2017 -
UnscoredUSN-3384-2 2 CVEs
linux-hwe vulnerabilities
USN-3384-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Andrey Konovalov discovered a race condition in the UD…
first Aug 11, 2017 -
UnscoredUSN-3379-1 1 CVE
shotwell vulnerability
It was discovered that Shotwell is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission.
first Aug 7, 2017 -
High max 7.1USN-3378-2 4 CVEs
linux-lts-xenial vulnerabilities
USN-3378-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Fan Wu and Shixiong Zhao discovered a race con…
first Aug 3, 2017 -
High max 7.1USN-3377-2 4 CVEs
linux-hwe vulnerabilities
USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Fan Wu and Shixiong Zhao discovered a race condition b…
first Aug 3, 2017 -
UnscoredUSN-3374-1 1 CVE
rabbitmq-server vulnerability
It was discovered that RabbitMQ incorrectly handled MQTT (MQ Telemetry Transport) authentication. A remote attacker could use this issue to authenticate successfully with an existing username by omitting the password.
first Jul 31, 2017 -
UnscoredUSN-3371-1 4 CVEs
linux-hwe vulnerabilities
It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2014-9900) Alexander Potapenko discovered a race condition in the Advanced…
first Jul 28, 2017 -
UnscoredUSN-3366-2 0 CVEs
openjdk-8 regression
USN-3366-1 fixed vulnerabilities in OpenJDK 8. Unfortunately, that update introduced a regression that caused some valid JAR files to fail validation. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discove…
first Jul 31, 2017 -
UnscoredUSN-3366-1 24 CVEs
openjdk-8 vulnerabilities
It was discovered that the JPEGImageReader class in OpenJDK would incorrectly read unused image data. An attacker could use this to specially construct a jpeg image file that when opened by a Java application would cause a denial of service. (CVE-2017-10053) …
first Jul 26, 2017 -
UnscoredUSN-3364-3 6 CVEs
linux-aws, linux-gke vulnerabilities
It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2014-9900) It was discovered that the Linux kernel did not properly restri…
first Jul 25, 2017 -
UnscoredUSN-3364-2 6 CVEs
linux-lts-xenial vulnerabilities
USN-3364-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that the Linux kernel did no…
first Jul 24, 2017 -
UnscoredUSN-3354-1 1 CVE
apport vulnerability
Felix Wilhelm discovered a path traversal vulnerability in Apport when handling the ExecutablePath field in crash files. An attacker could trick a user into opening a specially crafted crash file and execute arbitrary code with the user's privileges.
first Jul 18, 2017 -
UnscoredUSN-3352-1 1 CVE
nginx vulnerability
It was discovered that an integer overflow existed in the range filter feature of nginx. A remote attacker could use this to expose sensitive information.
first Jul 13, 2017 -
Low max 3.7USN-3349-1 16 CVEs
ntp vulnerabilities
Yihan Lian discovered that NTP incorrectly handled certain large request data values. A remote attacker could possibly use this issue to cause NTP to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-2519) Miroslav …
first Jul 5, 2017 -
UnscoredUSN-3344-2 8 CVEs
linux-lts-xenial vulnerabilities
USN-3344-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. USN 3334-1 fixed a vulnerability in the Linux …
first Jun 29, 2017 -
UnscoredUSN-3342-2 10 CVEs
linux-hwe vulnerabilities
USN-3342-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS. USN-3333-1 fixed a vulnerability in the Linux kernel. …
first Jun 29, 2017 -
UnscoredUSN-3339-1 5 CVEs
openvpn vulnerabilities
Karthikeyan Bhargavan and Gaëtan Leurent discovered that 64-bit block ciphers are vulnerable to a birthday attack. A remote attacker could possibly use this issue to recover cleartext data. Fixing this issue requires a configuration change to switch to a diff…
first Jun 22, 2017 -
UnscoredUSN-3334-1 1 CVE
linux-lts-xenial vulnerability
USN-3328-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that the stack guard page fo…
first Jun 22, 2017 -
UnscoredUSN-3333-1 1 CVE
linux-hwe vulnerability
USN-3326-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS. It was discovered that the stack guard page for proces…
first Jun 22, 2017 -
UnscoredUSN-3332-1 1 CVE
linux-raspi2 vulnerability
It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative …
first Jun 22, 2017 -
UnscoredUSN-3331-1 1 CVE
linux-aws vulnerability
It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative …
first Jun 22, 2017 -
UnscoredUSN-3330-1 1 CVE
linux-snapdragon vulnerability
It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative …
first Jun 22, 2017 -
UnscoredUSN-3329-1 1 CVE
linux-gke vulnerability
It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative …
first Jun 22, 2017