Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,466 results · Feed

  • Unscored
    USN-2554-1 5 CVEs

    gnupg, gnupg2 vulnerabilities

    Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered that GnuPG was susceptible to an attack via physical side channels. A local attacker could use this attack to possibly recover private keys. (CVE-2014-3591) Daniel Genkin, Adi Shamir, and…

    first Apr 1, 2015
  • Unscored
    USN-2551-1 1 CVE

    jakarta-taglibs-standard vulnerability

    David Jorm discovered that the Apache Standard Taglibs incorrectly handled external XML entities. A remote attacker could possibly use this issue to execute arbitrary code or perform other external XML entity attacks.

    first Mar 30, 2015
  • Unscored
    USN-2548-1 1 CVE

    batik vulnerability

    Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause r…

    first Mar 25, 2015
  • Unscored
    USN-2545-1 4 CVEs

    linux-lts-utopic vulnerabilities

    A flaw was discovered in the automatic loading of modules in the crypto subsystem of the Linux kernel. A local user could exploit this flaw to load installed kernel modules, increasing the attack surface and potentially using this to gain administrative privi…

    first Mar 24, 2015
  • High max 7.5
    USN-2539-1 2 CVEs

    python-django vulnerabilities

    Andrey Babak discovered that Django incorrectly handled strip_tags. A remote attacker could possibly use this issue to cause Django to enter an infinite loop, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2…

    first Mar 23, 2015
  • Unscored
    USN-2533-1 1 CVE

    sudo vulnerability

    Jakub Wilk and Stephane Chazelas discovered that Sudo incorrectly handled the TZ environment variable. An attacker with Sudo access could possibly use this issue to open arbitrary files, bypassing intended permissions.

    first Mar 16, 2015
  • Unscored
    USN-2531-1 1 CVE

    requests vulnerability

    Matthew Daley discovered that Requests incorrectly handled cookies without host values when being redirected. A remote attacker could possibly use this issue to perform session fixation or cookie stealing attacks.

    first Mar 16, 2015
  • Unscored
    USN-2529-1 1 CVE

    linux-lts-utopic vulnerability

    It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service (system crash) or to potentially g…

    first Mar 12, 2015
  • Unscored
    USN-2521-1 18 CVEs

    oxide-qt vulnerabilities

    Several out-of-bounds write bugs were discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or execute arbitrary code with the privi…

    first Mar 10, 2015
  • Unscored
    USN-2517-1 16 CVEs

    linux-lts-utopic vulnerabilities

    A flaw was discovered in the Kernel Virtual Machine's (KVM) emulation of the SYSTENTER instruction when the guest OS does not initialize the SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of service of the guest OS (crash) or potenti…

    first Feb 26, 2015
  • Unscored
    USN-2509-1 0 CVEs

    ca-certificates update

    The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20141019 package.

    first Feb 23, 2015
  • Unscored
    USN-2502-1 1 CVE

    unzip vulnerabilities

    William Robinet discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code.

    first Feb 17, 2015
  • Unscored
    USN-2497-1 2 CVEs

    ntp vulnerabilities

    Stephen Roettger, Sebastian Krahmer, and Harlan Stenn discovered that NTP incorrectly handled the length value in extension fields. A remote attacker could use this issue to possibly obtain leaked information, or cause the NTP daemon to crash, resulting in a …

    first Feb 9, 2015
  • Unscored
    USN-2495-1 4 CVEs

    oxide-qt vulnerabilities

    A use-after-free bug was discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash or execute arbitrary code with…

    first Feb 10, 2015
  • Unscored
    USN-2489-1 1 CVE

    unzip vulnerability

    Michal Zalewski discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code.

    first Feb 3, 2015
  • Unscored
    USN-2476-1 21 CVEs

    oxide-qt vulnerabilities

    Several memory corruption bugs were discovered in ICU. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via renderer crash or execute arbitrary code with the privileges …

    first Jan 26, 2015
  • Unscored
    USN-2473-1 1 CVE

    coreutils vulnerabilities

    It was discovered that the distcheck rule in dist-check.mk in GNU coreutils allows local users to gain privileges via a symlink attack on a directory tree under /tmp. This issue only affected Ubuntu 10.04 LTS. (CVE-2009-4135) Bertrand Jacquin and Fiedler Roma…

    first Jan 14, 2015
  • Unscored
    USN-2472-1 3 CVEs

    unzip vulnerabilities

    Wolfgang Ettlinger discovered that unzip incorrectly handled certain malformed zip archives. If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code.

    first Jan 14, 2015
  • High max 7.5
    USN-2469-1 4 CVEs

    python-django vulnerabilities

    Jedediah Smith discovered that Django incorrectly handled underscores in WSGI headers. A remote attacker could possibly use this issue to spoof headers in certain environments. (CVE-2015-0219) Mikko Ohtamaa discovered that Django incorrectly handled user-supp…

    first Jan 13, 2015
  • Unscored
    USN-2467-1 4 CVEs

    linux-lts-utopic vulnerabilities

    A null pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service (system crash) via a malformed INIT chunk. (CVE-2014-7841) A race conditio…

    first Jan 13, 2015
  • Unscored
    USN-2461-3 1 CVE

    pyyaml vulnerability

    Stanisław Pitucha and Jonathan Gray discovered that PyYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service.

    first Jan 12, 2015
  • Unscored
    USN-2461-2 1 CVE

    libyaml-libyaml-perl vulnerability

    Stanisław Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service.

    first Jan 12, 2015
  • Unscored
    USN-2458-2 0 CVEs

    ubufox update

    USN-2458-1 fixed vulnerabilities in Firefox. This update provides the corresponding version of Ubufox. Original advisory details: Christian Holler, Patrick McManus, Christoph Diehl, Gary Kwong, Jesse Ruderman, Byron Campen, Terrence Cole, and Nils Ohlmeier di…

    first Jan 14, 2015
  • Unscored
    USN-2456-1 1 CVE

    cpio vulnerabilities

    Michal Zalewski discovered an out of bounds write issue in the process_copy_in function of GNU cpio. An attacker could specially craft a cpio archive that could create a denial of service or possibly execute arbitrary code. (CVE-2014-9112) Jakob Lell discover…

    first Jan 8, 2015
  • Unscored
    USN-2455-1 1 CVE

    bsd-mailx vulnerability

    It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could possibly use this issue with a valid email address to execute arbitrary commands. This functionality…

    first Jan 7, 2015
  • Unscored
    USN-2453-1 1 CVE

    mime-support vulnerability

    Timothy D. Morgan discovered that the run-mailcap tool incorrectly filtered certain shell metacharacters in filenames. If a user or automated system were tricked into opening a file with a specially-crafted filename, a remote attacker could possibly execute a…

    first Jan 7, 2015
  • Unscored
    USN-2450-1 1 CVE

    strongswan vulnerability

    Mike Daskalakis discovered that strongSwan incorrectly handled IKEv2 payloads that contained the Diffie-Hellman group 1025. A remote attacker could use this issue to cause the IKE daemon to crash, resulting in a denial of service.

    first Jan 5, 2015
  • Unscored
    USN-2449-1 4 CVEs

    ntp vulnerabilities

    Neel Mehta discovered that NTP generated weak authentication keys. A remote attacker could possibly use this issue to brute force the authentication key and send requests if permitted by IP restrictions. (CVE-2014-9293) Stephen Roettger discovered that NTP ge…

    first Dec 22, 2014
  • Unscored
    USN-2447-2 0 CVEs

    linux-lts-utopic regression

    USN-2447-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated regression TCP Throughput drops to zero for several drivers after upgrading. This update fixes the problem. We apologize for the inconvenience. Original advisory details: An information…

    first Dec 19, 2014
  • Unscored
    USN-2447-1 11 CVEs

    linux-lts-utopic vulnerabilities

    Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register in the x86 architecture. A local attacker could exploit this flaw to gain administrative privileges. (CVE-2014-9322) An informatio…

    first Dec 12, 2014
  • Unscored
    USN-2440-1 1 CVE

    mutt vulnerability

    Jakub Wilk discovered that the write_one_header function in mutt did not properly handle newline characters at the beginning of a header. An attacker could specially craft an email to cause mutt to crash, resulting in a denial of service.

    first Dec 11, 2014
  • Unscored
    USN-2439-1 2 CVEs

    qemu, qemu-kvm vulnerabilities

    Michael S. Tsirkin discovered that QEMU incorrectly handled certain parameters during ram load while performing a migration. An attacker able to manipulate savevm data could use this issue to possibly execute arbitrary code on the host. This issue only affect…

    first Dec 11, 2014
  • Unscored
    USN-2433-1 4 CVEs

    tcpdump vulnerabilities

    Steffen Bauch discovered that tcpdump incorrectly handled printing OSLR packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-8767) Steffen Bauch discovered t…

    first Dec 4, 2014
  • Unscored
    USN-2431-2 0 CVEs

    maas regression

    USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that mod_wsgi incorre…

    first Dec 4, 2014
  • Unscored
    USN-2431-1 1 CVE

    mod-wsgi vulnerability

    It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could possibly use this issue to cause a local privilege escalation when using daemon mode.

    first Dec 3, 2014
  • Unscored
    USN-2430-1 1 CVE

    openvpn vulnerability

    Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of service.

    first Dec 2, 2014
  • Unscored
    USN-2422-1 2 CVEs

    squid3 vulnerabilities

    Sebastian Krahmer discovered that the Squid pinger incorrectly handled certain malformed ICMP packets. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service.

    first Nov 25, 2014
  • Unscored
    USN-2410-1 5 CVEs

    oxide-qt vulnerabilities

    A buffer overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacked could potentially exploit this to cause a denial of service via renderer crash or execute arbitrary code with the privileges of the sandbox…

    first Nov 19, 2014
  • Unscored
    USN-2409-1 6 CVEs

    qemu, qemu-kvm vulnerabilities

    Laszlo Ersek discovered that QEMU incorrectly handled memory in the vga device. A malicious guest could possibly use this issue to read arbitrary host memory. This issue only affected Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2014-3615) Xavier Mehrenberger and …

    first Nov 13, 2014
  • Unscored
    USN-2408-1 1 CVE

    neutron vulnerability

    Elena Ezhova discovered that OpenStack Neutron did not properly perform access control checks for attributes. A remote authenticated attacker could exploit this to bypass intended access controls and reset admin-only attributes to default values.

    first Nov 11, 2014