Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,466 results · Feed

  • Unscored
    USN-2665-1 5 CVEs

    linux-lts-vivid vulnerabilities

    A race condition was discovered in the Linux kernel's file_handle size verification. A local user could exploit this flaw to read potentially sensative memory locations. (CVE-2015-1420) A underflow error was discovered in the Linux kernel's Ozmo Devices USB o…

    first Jul 7, 2015
  • Unscored
    USN-2664-1 7 CVEs

    linux-lts-utopic vulnerabilities

    A race condition was discovered in the Linux kernel's file_handle size verification. A local user could exploit this flaw to read potentially sensative memory locations. (CVE-2015-1420) A underflow error was discovered in the Linux kernel's Ozmo Devices USB o…

    first Jul 7, 2015
  • Unscored
    USN-2657-1 1 CVE

    unattended-upgrades vulnerability

    It was discovered that unattended-upgrades incorrectly performed authentication checks in certain configurations. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages.

    first Jun 29, 2015
  • Unscored
    USN-2654-1 4 CVEs

    tomcat7 vulnerabilities

    It was discovered that the Tomcat XML parser incorrectly handled XML External Entities (XXE). A remote attacker could possibly use this issue to read arbitrary files. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-0119) It was discovered that Tomcat inc…

    first Jun 25, 2015
  • Unscored
    USN-2652-1 4 CVEs

    oxide-qt vulnerabilities

    It was discovered that Chromium did not properly consider the scheme when determining whether a URL is associated with a WebUI SiteInstance. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass…

    first Jun 30, 2015
  • Unscored
    USN-2651-1 5 CVEs

    patch vulnerabilities

    Jakub Wilk discovered that GNU patch did not correctly handle file paths in patch files. An attacker could specially craft a patch file that could overwrite arbitrary files with the privileges of the user invoking the program. This issue only affected Ubuntu …

    first Jun 22, 2015
  • Unscored
    USN-2650-1 6 CVEs

    wpa, wpasupplicant vulnerabilities

    Kostya Kortchinsky discovered multiple flaws in wpa_supplicant and hostapd. A remote attacker could use these issues to cause wpa_supplicant or hostapd to crash, resulting in a denial of service. (CVE-2015-4141, CVE-2015-4142, CVE-2015-4143, CVE-2015-4144, CV…

    first Jun 16, 2015
  • Unscored
    USN-2649-1 1 CVE

    devscripts vulnerability

    It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a remote attacker could possibly replace arbitrary files, leading to a privilege escalation.

    first Jun 16, 2015
  • Unscored
    USN-2648-1 1 CVE

    aptdaemon vulnerability

    Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive information, or perform other file access as the root user.

    first Jun 16, 2015
  • Unscored
    USN-2645-1 1 CVE

    linux-lts-vivid vulnerability

    Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.

    first Jun 15, 2015
  • Unscored
    USN-2644-2 0 CVEs

    linux-lts-utopic regression

    The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's overlayfs file system. The removal of a directory that only exists on the lower layer results in a kernel panic. We apologize for the inconvenience. Original advisory details: Philip Pe…

    first Jun 21, 2015
  • Unscored
    USN-2644-1 1 CVE

    linux-lts-utopic vulnerability

    Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.

    first Jun 15, 2015
  • Unscored
    USN-2636-1 3 CVEs

    linux-lts-vivid vulnerabilities

    Xiong Zhou discovered a bug in the way the EXT4 filesystem handles fallocate zero range functionality when the page size is greater than the block size. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-0275) Wen …

    first Jun 10, 2015
  • Unscored
    USN-2635-1 2 CVEs

    linux-lts-utopic vulnerabilities

    Xiong Zhou discovered a bug in the way the EXT4 filesystem handles fallocate zero range functionality when the page size is greater than the block size. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-0275) Wen …

    first Jun 10, 2015
  • Unscored
    USN-2630-1 6 CVEs

    qemu, qemu-kvm vulnerabilities

    Matt Tait discovered that QEMU incorrectly handled the virtual PCNET driver. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation,…

    first Jun 10, 2015
  • Unscored
    USN-2628-1 1 CVE

    strongswan vulnerability

    Alexander E. Patrakov discovered that strongSwan incorrectly handled certain IKEv2 setups. A malicious server could possibly use this issue to obtain user credentials.

    first Jun 8, 2015
  • Unscored
    USN-2627-1 1 CVE

    t1utils vulnerability

    Jakub Wilk discovered that t1utils incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially crafted font, a remote attacker could crash the application, leading to a denial of service, or possibly execut…

    first Jun 3, 2015
  • Medium max 5.7
    USN-2618-1 1 CVE

    python-dbusmock vulnerability

    It was discovered that python-dbusmock incorrectly handled template loading from shared directories. A local attacker could possibly use this issue to execute arbitrary code.

    first May 21, 2015
  • Unscored
    USN-2615-1 3 CVEs

    linux-lts-utopic vulnerabilities

    Alexandre Oliva reported a race condition flaw in the btrfs file system's handling of extended attributes (xattrs). A local attacker could exploit this flaw to bypass ACLs and potentially escalate privileges. (CVE-2014-9710) A memory corruption issue was disc…

    first May 20, 2015
  • Unscored
    USN-2610-1 10 CVEs

    oxide-qt vulnerabilities

    Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin Policy restrictions. (CVE-2015-1253, CVE-2015-1254)…

    first May 21, 2015
  • Unscored
    USN-2609-1 2 CVEs

    apport vulnerabilities

    Sander Bos discovered that Apport incorrectly handled permissions when the system was configured to generate core dumps for setuid binaries. A local attacker could use this issue to gain elevated privileges. (CVE-2015-1324) Philip Pettersson discovered that A…

    first May 21, 2015
  • Unscored
    USN-2608-1 3 CVEs

    qemu, qemu-kvm vulnerabilities

    Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU pr…

    first May 13, 2015
  • Unscored
    USN-2607-1 4 CVEs

    libmodule-signature-perl vulnerabilities

    John Lightsey discovered that Module::Signature incorrectly handled PGP signature boundaries. A remote attacker could use this issue to trick Module::Signature into parsing the unsigned portion of the SIGNATURE file as the signed portion. (CVE-2015-3406) John…

    first May 12, 2015
  • Unscored
    USN-2599-2 0 CVEs

    linux-lts-utopic vulnerability

    USN-2599-1 fixed vulnerabilities in the Linux kernel, however an unrelated regression in the auditing of some path names was introduced. Due to the regression the system could crash under certain conditions. This update fixes the problem. We apologize for the…

    first May 9, 2015
  • Unscored
    USN-2599-1 1 CVE

    linux-lts-utopic vulnerability

    A race condition between chown() and execve() was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges.

    first May 5, 2015
  • Unscored
    USN-2593-1 1 CVE

    dnsmasq vulnerability

    Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly obtain sensitive information.

    first May 4, 2015
  • Unscored
    USN-2592-1 1 CVE

    libxml-libxml-perl vulnerability

    Tilmann Haak discovered that XML::LibXML incorrectly handled the expand_entities parameter in certain situations. A remote attacker could possibly use this issue to access sensitive information.

    first May 4, 2015
  • Unscored
    USN-2589-1 4 CVEs

    linux-lts-utopic vulnerabilities

    Jan Beulich discovered the Xen virtual machine subsystem of the Linux kernel did not properly restrict access to PCI command registers. A local guest user could exploit this flaw to cause a denial of service (host crash). (CVE-2015-2150) A stack overflow was …

    first Apr 30, 2015
  • Unscored
    USN-2582-1 2 CVEs

    oxide-qt vulnerabilities

    A use-after-free was discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with th…

    first May 6, 2015
  • Unscored
    USN-2580-1 4 CVEs

    tcpdump vulnerabilities

    It was discovered that tcpdump incorrectly handled printing certain packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code. In the default installation, attackers would b…

    first Apr 27, 2015
  • Unscored
    USN-2577-1 1 CVE

    wpa vulnerability

    It was discovered that wpa_supplicant incorrectly handled SSID information when creating or updating P2P peer entries. A remote attacker could use this issue to cause wpa_supplicant to crash, resulting in a denial of service, expose memory contents, or possib…

    first Apr 23, 2015
  • Unscored
    USN-2576-1 0 CVEs

    usb-creator vulnerability

    Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges.

    first Apr 23, 2015
  • Unscored
    USN-2574-1 6 CVEs

    openjdk-7 vulnerabilities

    Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2015-0460, CVE-2015-046…

    first Apr 21, 2015
  • Unscored
    USN-2570-1 12 CVEs

    oxide-qt vulnerabilities

    An issue was discovered in the HTML parser in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2015-1235) An issue was discovered in the Web Audio API …

    first Apr 27, 2015
  • Unscored
    USN-2569-2 0 CVEs

    apport vulnerability

    USN-2569-1 fixed a vulnerability in Apport. Tavis Ormandy discovered that the fixed packages were still vulnerable to a privilege escalation attack. This update completely disables crash report handling for containers until a more complete solution is availab…

    first Apr 16, 2015
  • Unscored
    USN-2569-1 1 CVE

    apport vulnerability

    Stéphane Graber and Tavis Ormandy independently discovered that Apport incorrectly handled the crash reporting feature. A local attacker could use this issue to gain elevated privileges.

    first Apr 14, 2015
  • Unscored
    USN-2567-1 2 CVEs

    ntp vulnerabilities

    Miroslav Lichvar discovered that NTP incorrectly validated MAC fields. A remote attacker could possibly use this issue to bypass authentication and spoof packets. (CVE-2015-1798) Miroslav Lichvar discovered that NTP incorrectly handled certain invalid packets…

    first Apr 13, 2015
  • Unscored
    USN-2564-1 4 CVEs

    linux-lts-utopic vulnerabilities

    An integer overflow was discovered in the stack randomization feature of the Linux kernel on 64 bit platforms. A local attacker could exploit this flaw to bypass the Address Space Layout Randomization (ASLR) protection mechanism. (CVE-2015-1593) An informatio…

    first Apr 9, 2015
  • Unscored
    USN-2558-1 1 CVE

    mailman vulnerability

    It was discovered that Mailman incorrectly handled special characters in list names. A local attacker could use this issue to perform a path traversal attack and execute arbitrary code as the Mailman user.

    first Apr 7, 2015
  • Unscored
    USN-2556-1 3 CVEs

    oxide-qt vulnerabilities

    It was discovered that Chromium did not properly handle the interaction of IPC, the gamepad API and V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to execute arbitrary code with the privileges …

    first Apr 7, 2015