Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3337-1
HistoryJun 21, 2017 - 12:00 a.m.

Valgrind vulnerabilities

2017-06-2100:00:00
ubuntu.com
46

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.026

Percentile

90.3%

JSON

Releases

  • Ubuntu 17.04
  • Ubuntu 16.10
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • valgrind - instrumentation framework for building dynamic analysis tools

Details

It was discovered that Valgrind incorrectly handled certain string
operations. If a user or automated system were tricked into processing a
specially crafted binary, a remote attacker could possibly execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04
LTS and Ubuntu 16.10. (CVE-2016-2226)

It was discovered that Valgrind incorrectly handled parsing certain
binaries. If a user or automated system were tricked into processing a
specially crafted binary, a remote attacker could use this issue to cause
Valgrind to crash, resulting in a denial of service. (CVE-2016-4487,
CVE-2016-4488, CVE-2016-4489, CVE-2016-4490, CVE-2016-4491, CVE-2016-4492,
CVE-2016-4493, CVE-2016-6131)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchvalgrind< 1:3.12.0-1ubuntu1.1UNKNOWN
Ubuntu17.04noarchvalgrind-dbg< 1:3.12.0-1ubuntu1.1UNKNOWN
Ubuntu17.04noarchvalgrind-dbgsym< 1:3.12.0-1ubuntu1.1UNKNOWN
Ubuntu17.04noarchvalgrind-mpi< 1:3.12.0-1ubuntu1.1UNKNOWN
Ubuntu17.04noarchvalgrind-mpi-dbgsym< 1:3.12.0-1ubuntu1.1UNKNOWN
Ubuntu16.10noarchvalgrind< 1:3.12.0~svn20160714-1ubuntu2.1UNKNOWN
Ubuntu16.10noarchvalgrind-dbg< 1:3.12.0~svn20160714-1ubuntu2.1UNKNOWN
Ubuntu16.10noarchvalgrind-dbgsym< 1:3.12.0~svn20160714-1ubuntu2.1UNKNOWN
Ubuntu16.10noarchvalgrind-mpi< 1:3.12.0~svn20160714-1ubuntu2.1UNKNOWN
Ubuntu16.10noarchvalgrind-mpi-dbgsym< 1:3.12.0~svn20160714-1ubuntu2.1UNKNOWN
Rows per page:
1-10 of 161

Related

openvas 15
nessus 16
ubuntu 3
debian 1
mageia 5
osv 3
cloudfoundry 1
ubuntucve 10
nvd 9
cve 9
prion 9
cvelist 9
veracode 9
redhatcve 3
debiancve 9
f5 1
exploitdb 1
zdt 1
cloudlinux 2
ibm 1
openvas
openvas
Ubuntu: Security Advisory (USN-3368-1)
2017-07-27 00:00:00
Ubuntu: Security Advisory (USN-3337-1)
2017-06-22 00:00:00
Mageia: Security Advisory (MGASA-2017-0222)
2022-01-28 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : Valgrind vulnerabilities (USN-3337-1)
2017-06-22 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : libiberty vulnerabilities (USN-3368-1)
2017-07-27 00:00:00
RHEL 5 : gcc (Unpatched Vulnerability)
2024-05-11 00:00:00
ubuntu
ubuntu
libiberty vulnerabilities
2017-07-26 00:00:00
gdb vulnerabilities
2017-07-26 00:00:00
GNU binutils vulnerabilities
2021-07-21 00:00:00
debian
debian
[SECURITY] [DLA 552-1] binutils security update
2016-07-18 08:45:05
mageia
mageia
Updated valgrind packages fix security vulnerabilities
2017-07-28 21:12:15
Updated binutils packages fix security vulnerability
2018-01-03 17:22:14
Updated gdb packages fix security vulnerability
2018-01-03 17:22:14
osv
osv
binutils - security update
2016-07-18 00:00:00
valgrind-3.19.0-3.1 on GA media
2024-06-15 00:00:00
binutils vulnerabilities
2021-07-21 13:08:04
cloudfoundry
cloudfoundry
USN-3367-1: gdb vulnerabilities | Cloud Foundry
2017-08-04 00:00:00
ubuntucve
ubuntucve
CVE-2016-4488
2017-02-24 00:00:00
CVE-2016-4493
2017-02-24 00:00:00
CVE-2016-4490
2017-02-24 00:00:00
nvd
nvd
CVE-2016-6131
2017-02-07 15:59:00
CVE-2016-4493
2017-02-24 20:59:00
CVE-2016-4490
2017-02-24 20:59:00
cve
cve
CVE-2016-4490
2017-02-24 20:59:00
CVE-2016-6131
2017-02-07 15:59:00
CVE-2016-4489
2017-02-24 20:59:00
prion
prion
Integer overflow
2017-02-24 20:59:00
Integer overflow
2017-02-24 20:59:00
Stack overflow
2017-02-07 15:59:00
cvelist
cvelist
CVE-2016-4490
2017-02-24 20:00:00
CVE-2016-6131
2017-02-07 15:00:00
CVE-2016-4487
2017-02-24 20:00:00
veracode
veracode
Denial Of Service (DoS)
2020-09-21 06:35:12
Denial Of Service (DoS)
2020-09-21 06:27:45
Denial Of Service (DoS)
2020-09-21 06:26:51
redhatcve
redhatcve
CVE-2016-6131
2016-07-01 14:49:10
CVE-2016-4493
2016-05-05 12:18:43
CVE-2016-4492
2016-05-05 12:18:47
debiancve
debiancve
CVE-2016-4489
2017-02-24 20:59:00
CVE-2016-6131
2017-02-07 15:59:00
CVE-2016-4490
2017-02-24 20:59:00
f5
f5
K55031185 : demangler in GNU Libiberty vulnerability CVE-2016-6131
2017-04-18 00:00:00
exploitdb
exploitdb
GNU libiberty - Buffer Overflow
2017-07-27 00:00:00
zdt
zdt
GNU libiberty - Buffer Overflow Exploit
2017-07-28 00:00:00
cloudlinux
cloudlinux
Fix of 36 CVEs
2021-12-27 16:08:07
Fix of CVE: CVE-2018-18605, CVE-2019-12972, CVE-2016-4490, CVE-2018-6543, CVE-2018-19931, CVE-2018-10535, CVE-2019-17450, CVE-2018-7643, CVE-2016-4487, CVE-2016-4492, CVE-2018-20002, CVE-2018-1000876, CVE-2019-9073, CVE-2019-9075, CVE-2018-20671, CVE-2016-4488, CVE-2018-7568, CVE-2018-7642, CVE-2018-10373, CVE-2018-6323, CVE-2016-2226, CVE-2016-4493, CVE-2018-19932, CVE-2018-6759, CVE-2019-9077, CVE-2018-18607, CVE-2018-8945, CVE-2018-7208, CVE-2016-6131, CVE-2018-13033, CVE-2018-20623, CVE-2019-14444, CVE-2018-18309, CVE-2018-18606, CVE-2018-7569, CVE-2016-4489
2021-12-16 16:02:14
ibm
ibm
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs
2023-03-08 18:05:21

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.026

Percentile

90.3%

JSON
Related for USN-3337-1
openvas15nessus16ubuntu3debian1mageia5osv3cloudfoundry1ubuntucve10nvd9cve9prion9cvelist9veracode9redhatcve3debiancve9f51exploitdb1zdt1cloudlinux2ibm1