Lucene search
+L
UbuntuMost viewed

11213 matches found

Ubuntu
Ubuntu
added 2017/05/17 12:22 a.m.86 views

USN-3291-1: Linux kernel vulnerabilities

Dmitry Vyukov discovered that the generic SCSI sg subsystem in the Linux kernel contained a stack-based buffer overflow. A local attacker with access to an sg device could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-7187 It was discovered that a...

7.8CVSS7.4AI score0.00414EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2017/02/22 7:49 a.m.86 views

USN-3209-1: Linux kernel vulnerabilities

It was discovered that the generic SCSI block layer in the Linux kernel did not properly restrict write operations in certain situations. A local attacker could use this to cause a denial of service system crash or possibly gain administrative privileges. CVE-2016-10088 Jim Mattson discovered tha...

7.8CVSS6.8AI score0.0596EPSS
SaveExploits13
Ubuntu
Ubuntu
added 2016/11/29 12:21 a.m.86 views

USN-3139-1: Vim vulnerability

Florian Larysch discovered that the Vim text editor did not properly validate values for the 'filetype', 'syntax', and 'keymap' options. An attacker could trick a user into opening a file with specially crafted modelines and possibly execute arbitrary code with the user's privileges...

7.8CVSS7.1AI score0.25314EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2016/11/11 7:14 a.m.86 views

USN-3127-2: Linux kernel (Trusty HWE) vulnerabilities

USN-3127-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. It was discovered that the compression handling code in the Advanced Linux Sound...

7.8CVSS7.3AI score0.0051EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2016/10/13 1:54 p.m.86 views

USN-3103-1: DBD::mysql vulnerabilities

It was discovered that DBD::mysql incorrectly handled certain memory operations. A remote attacker could use this issue to cause DBD::mysql to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2014-9906 Hanno Böck discovered that DBD::mysql incorrectly handled certa...

10CVSS8.1AI score0.06026EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2016/06/27 9:19 p.m.86 views

USN-3018-2: Linux kernel (Trusty HWE) vulnerabilities

USN-3018-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not...

7.8CVSS7AI score0.05676EPSS
SaveExploits14
Ubuntu
Ubuntu
added 2016/06/10 5:28 a.m.86 views

USN-2997-1: Linux kernel (OMAP4) vulnerabilities

Jann Horn discovered that eCryptfs improperly attempted to use the mmap handler of a lower filesystem that did not implement one, causing a recursive page fault to occur. A local unprivileged attacker could use to cause a denial of service system crash or possibly execute arbitrary code with...

10CVSS6.8AI score0.2593EPSS
SaveExploits38
Ubuntu
Ubuntu
added 2016/05/16 5:25 p.m.86 views

USN-2977-1: Linux kernel (Vivid HWE) vulnerability

Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privilege...

7.8CVSS7.3AI score0.00397EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2016/05/16 5:17 p.m.86 views

USN-2976-1: Linux kernel (Utopic HWE) vulnerability

Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privilege...

7.8CVSS7.3AI score0.00397EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2016/02/27 8:58 a.m.86 views

USN-2909-2: Linux kernel (Utopic HWE) regression

USN-2909-1 fixed vulnerabilities in the Ubuntu 14.10 Linux kernel backported to Ubuntu 14.04 LTS. An incorrect locking fix caused a regression that broke graphics displays for Ubuntu 14.04 LTS guests running the Ubuntu 14.10 backport kernel within VMWare virtual machines. This update fixes the...

7AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2016/02/22 8:42 p.m.86 views

USN-2908-2: Linux kernel (Wily HWE) vulnerabilities

halfdog discovered that OverlayFS, when mounting on top of a FUSE mount, incorrectly propagated file attributes, including setuid. A local unprivileged attacker could use this to gain privileges. CVE-2016-1576 halfdog discovered that OverlayFS in the Linux kernel incorrectly propagated security...

7.8CVSS7.2AI score0.01129EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2016/02/17 2:46 p.m.86 views

USN-2902-1: graphite2 vulnerabilities

Yves Younan discovered that graphite2 incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially- crafted font file, a remote attacker could use this issue to cause graphite2 to crash, resulting in a denial of service, or possibly execute...

9.3CVSS7.6AI score0.0831EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/12/17 7:37 p.m.86 views

USN-2843-3: Linux kernel (Raspberry Pi 2) vulnerabilities

郭永刚 discovered that the ppp implementation in the Linux kernel did not ensure that certain slot numbers are valid. A local attacker with the privilege to call ioctl on /dev/ppp could cause a denial of service system crash. CVE-2015-7799 Dmitry Vyukov discovered that the Linux kernel's keyring...

4.9CVSS6.3AI score0.00646EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/12/01 9:59 p.m.86 views

USN-2824-1: Linux kernel (Utopic HWE) vulnerability

Dmitry Vyukov discovered that the Linux kernel's keyring handler attempted to garbage collect incompletely instantiated keys. A local unprivileged attacker could use this to cause a denial of service system crash...

2.1CVSS6.3AI score0.00508EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2015/11/05 12:14 a.m.86 views

USN-2792-1: Linux kernel vulnerabilities

Dmitry Vyukov discovered that the Linux kernel did not properly initialize IPC object state in certain situations. A local attacker could use this to escalate their privileges, expose confidential information, or cause a denial of service system crash. CVE-2015-7613 It was discovered that the Lin...

6.9CVSS6.7AI score0.05059EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/07/23 11:12 p.m.86 views

USN-2678-1: Linux kernel vulnerabilities

A flaw was discovered in the user space memory copying for the pipe iovecs in the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges. CVE-2015-1805 Daniel Borkmann reported a kernel crash in the Linux...

7.2CVSS7AI score0.01395EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2015/04/08 10:23 p.m.86 views

USN-2561-1: Linux kernel (OMAP4) vulnerabilities

It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service system crash or to potentially gain administrative privileges...

6.9CVSS6.6AI score0.03814EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/03/24 12:44 p.m.86 views

USN-2547-1: Mono vulnerabilities

It was discovered that the Mono TLS implementation was vulnerable to the SKIP-TLS vulnerability. A remote attacker could possibly use this issue to perform client impersonation attacks. CVE-2015-2318 It was discovered that the Mono TLS implementation was vulnerable to the FREAK vulnerability. A...

9.8CVSS7.9AI score0.03539EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/02/26 10:49 a.m.86 views

USN-2511-1: Linux kernel vulnerabilities

A race condition was discovered in the Linux kernel's key ring. A local user could cause a denial of service memory corruption or panic or possibly have unspecified impact via the keyctl commands. CVE-2014-9529 A memory leak was discovered in the ISO 9660 CDROM file system when parsing rock ridge...

6.9CVSS6.8AI score0.00461EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2015/01/27 8:56 p.m.86 views

USN-2486-1: OpenJDK 6 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,...

10CVSS6.5AI score0.99999EPSS
SaveExploits13
Ubuntu
Ubuntu
added 2015/01/13 11:43 a.m.86 views

USN-2465-1: Linux kernel (Trusty HWE) vulnerabilities

A null pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service system crash via a malformed INIT chunk. CVE-2014-7841 A race condition with MMIO and PIO transactions in the KV...

6.1CVSS6.8AI score0.0523EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2014/12/02 8:24 p.m.86 views

USN-2424-1: Firefox vulnerabilities

Gary Kwong, Randell Jesup, Nils Ohlmeier, Jesse Ruderman, Max Jonas Werner, Christian Holler, Jon Coppeard, Eric Rahm, Byron Campen, Eric Rescorla, and Xidorn Quan discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker...

6.8CVSS8.4AI score0.04052EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2014/10/09 10:55 a.m.86 views

USN-2378-1: Linux kernel (Trusty HWE) vulnerabilities

Steven Vittitoe reported multiple stack buffer overflows in Linux kernel's magicmouse HID driver. A physically proximate attacker could exploit this flaw to cause a denial of service system crash or possibly execute arbitrary code via specially crafted devices. CVE-2014-3181 Ben Hawkes reported...

7.8CVSS7.1AI score0.06167EPSS
SaveExploits8
Ubuntu
Ubuntu
added 2014/09/02 5:49 p.m.86 views

USN-2334-1: Linux kernel vulnerabilities

An flaw was discovered in the Linux kernel's audit subsystem when auditing certain syscalls. A local attacker could exploit this flaw to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service OOPS. CVE-2014-3917 An information leak was discovered in the rdm...

7.1CVSS6.7AI score0.05926EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2014/07/17 12:40 a.m.86 views

USN-2286-1: Linux kernel (Raring HWE) vulnerabilities

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol PPP when used with the Layer Two Tunneling Protocol L2TP. A local user could exploit this flaw to gain administrative privileges. CVE-2014-4943 Michael S. Tsirkin discovered an information leak in the Linux kernel's...

7.5CVSS7AI score0.05421EPSS
SaveExploits16
Ubuntu
Ubuntu
added 2014/06/23 11:52 a.m.86 views

USN-2232-3: OpenSSL regression

USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for CVE-2014-0224 caused a regression for certain applications that use renegotiation, such as PostgreSQL. This update fixes the problem. Original advisory details: Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS...

7.6AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2014/02/18 10:59 p.m.86 views

USN-2115-1: Linux kernel (OMAP4) vulnerabilities

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 A flaw in the handling of memory regions of the kernel virtual machine KVM subsystem was discovered. ...

4.7CVSS6.8AI score0.00654EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2014/02/04 7:47 p.m.86 views

USN-2098-1: LibYAML vulnerability

Florian Weimer discovered that LibYAML incorrectly handled certain large yaml documents. An attacker could use this issue to cause LibYAML to crash, resulting in a denial of service, or possibly execute arbitrary code...

6.8CVSS6.6AI score0.07386EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2014/01/31 5:25 a.m.86 views

USN-2096-1: Linux kernel vulnerability

Pageexec reported a bug in the Linux kernel's recvmmsg syscall when called from code using the x32 ABI. An unprivileged local user could exploit this flaw to cause a denial of service system crash or gain administrator privileges...

6.9CVSS7.2AI score0.35451EPSS
SaveExploits17
Ubuntu
Ubuntu
added 2014/01/03 10:44 a.m.86 views

USN-2067-1: Linux kernel (OMAP4) vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged...

8.8CVSS7.4AI score0.39711EPSS
SaveExploits18
Ubuntu
Ubuntu
added 2013/12/03 7:38 p.m.86 views

USN-2045-1: Linux kernel vulnerabilities

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Alan Chester reported a flaw in the IPv6 Stream Control Transmission Protocol SCTP of the Linux kernel. A...

6.1CVSS6.8AI score0.04144EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2013/05/15 5:17 p.m.86 views

USN-1824-1: Linux kernel vulnerabilities

Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6549 Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN...

6.9CVSS6.9AI score0.0082EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2013/04/23 9:00 p.m.86 views

USN-1806-1: OpenJDK 7 vulnerabilities

Ben Murphy discovered a vulnerability in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to execute arbitrary code. CVE-2013-0401 James Forshaw discovered a vulnerability in the OpenJDK JRE related to information disclosure, data integrity and...

10CVSS7.5AI score0.87227EPSS
SaveExploits22
Ubuntu
Ubuntu
added 2013/03/05 11:01 p.m.86 views

USN-1755-1: OpenJDK 6 vulnerabilities

It was discovered that OpenJDK did not properly validate certain types of images. A remote attacker could exploit this to cause OpenJDK to crash. CVE-2013-0809 It was discovered that OpenJDK did not properly check return values when performing color conversion for images. If a user were tricked...

10CVSS8.6AI score0.86151EPSS
SaveExploits10
Ubuntu
Ubuntu
added 2013/02/13 5:45 p.m.86 views

USN-1722-1: jQuery vulnerability

It was discovered that jQuery incorrectly handled selecting elements using location.hash, resulting in a possible cross-site scripting XSS issue. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify...

4.3CVSS7AI score0.19191EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2012/03/23 9:57 a.m.86 views

USN-1401-2: Thunderbird vulnerabilities

USN-1401-1 fixed vulnerabilities in Xulrunner. This update provides the corresponding fixes for Thunderbird. Original advisory details: It was discovered that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a...

9.3CVSS8.7AI score0.69628EPSS
SaveExploits11References1
Ubuntu
Ubuntu
added 2012/01/23 9:47 p.m.86 views

USN-1340-1: Linux kernel (Oneiric backport) vulnerabilities

Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. CVE-2011-2203 A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain ro...

7.8CVSS7.1AI score0.00535EPSS
SaveExploits7
Ubuntu
Ubuntu
added 2012/01/11 10:56 a.m.86 views

USN-1325-1: Linux kernel (OMAP4) vulnerabilities

Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel...

7.8CVSS6.5AI score0.03228EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2011/12/08 11:36 a.m.86 views

USN-1293-1: Linux kernel vulnerabilities

A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. CVE-2011-4077 Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions...

7.2CVSS6.2AI score0.03212EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2011/10/18 3:49 p.m.86 views

USN-1232-1: X.Org X server vulnerabilities

It was discovered that the X server incorrectly handled certain malformed input. An authorized attacker could exploit this to cause the X server to crash, leading to a denial or service, or possibly execute arbitrary code with root privileges. This issue only affected Ubuntu 10.04 LTS and 10.10...

8.5CVSS5.8AI score0.05347EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2011/09/13 8:12 p.m.86 views

USN-1203-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

7.8CVSS6.8AI score0.08793EPSS
SaveExploits24
Ubuntu
Ubuntu
added 2011/08/17 6:13 p.m.86 views

USN-1192-2: Mozvoikko update

USN-1192-1 fixed vulnerabilities in Firefox. This update provides an updated Mozvoikko for use with Firefox 6. Original advisory details: Aral Yaman discovered a vulnerability in the WebGL engine. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privilege...

9AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2011/06/29 10:57 p.m.86 views

USN-1149-2: Firefox regression

USN-1149-1 fixed vulnerabilities in Firefox. Unfortunately, a regression was introduced that prevented cookies from being stored properly when the hostname was a single character. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple memory...

9AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2011/05/05 7:19 a.m.86 views

USN-1122-1: Thunderbird vulnerabilities

It was discovered that there was a vulnerability in the memory handling of certain types of content. An attacker could exploit this to possibly run arbitrary code as the user running Thunderbird. CVE-2011-0081 It was discovered that Thunderbird incorrectly handled certain JavaScript requests. If...

10CVSS8.8AI score0.73835EPSS
SaveExploits29
Ubuntu
Ubuntu
added 2011/02/11 1:27 a.m.86 views

USN-1061-1: iTALC vulnerability

Stéphane Graber discovered that the iTALC private keys shipped with the Edubuntu Live DVD were not correctly regenerated once Edubuntu was installed. If an iTALC client was installed with the vulnerable keys, a remote attacker could gain control of the system. Only systems using keys from the...

9.3CVSS5.3AI score0.0293EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2011/02/03 7:23 p.m.86 views

USN-1057-1: Linux kernel vulnerabilities

Dave Chinner discovered that the XFS filesystem did not correctly order inode lookups when exported by NFS. A remote attacker could exploit this to read or write disk blocks that had changed file assignment or had become unlinked, leading to a loss of privacy. CVE-2010-2943 Dan Rosenberg discover...

8.1CVSS6.6AI score0.17009EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2010/09/20 6:22 p.m.86 views

USN-989-1: PHP vulnerabilities

Auke van Slooten discovered that PHP incorrectly handled certain xmlrpc requests. An attacker could exploit this issue to cause the PHP server to crash, resulting in a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.04 and 9.10. CVE-2010-0397 It was discovered that the...

9.8CVSS8.9AI score0.12652EPSS
SaveExploits16
Ubuntu
Ubuntu
added 2010/05/21 5:03 p.m.86 views

USN-942-1: PostgreSQL vulnerabilities

It was discovered that the Safe.pm module as used by PostgreSQL did not properly restrict PL/perl procedures. If PostgreSQL was configured to use Perl stored procedures, a remote authenticated attacker could exploit this to execute arbitrary Perl code. CVE-2010-1169 It was discovered that...

8.5CVSS8.5AI score0.04081EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2009/12/10 12:56 a.m.86 views

USN-869-1: Linux kernel vulnerabilities

David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets. A remote attacker could send specially crafted traffic that would cause a system to crash, leading to a denial of service. The fix was included in the earlier kernels from USN-864-1...

7.8CVSS7.9AI score0.03872EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2009/07/22 3:25 p.m.86 views

USN-798-1: Firefox and Xulrunner vulnerabilities

Several flaws were discovered in the Firefox browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-2462,...

10CVSS8.7AI score0.1323EPSS
SaveExploits4
Total number of security vulnerabilities5000