canonical ubuntu linux 17.04 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Apport up to and including 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges. NOTE: this vul...

Apport Project Apport Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 14.04

7.2

CVSSv2

Apport 2.13 up to and including 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, ...

Apport Project Apport Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 14.04

7.2

CVSSv2

Apport prior to 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from conta...

Apport Project Apport Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 17.10

5

CVSSv2

When using incomplete escape codes, Irssi prior to 1.0.6 may access data beyond the end of the string.

Irssi Irssi Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 17.10 Canonical Ubuntu Linux 14.04

9.3

CVSSv2

Bazaar up to and including 2.7.0, when Subprocess SSH is used, allows remote malicious users to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-...

Debian Debian Linux 9.0 Debian Debian Linux 8.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 14.04 Canonical Bazaar

4.9

CVSSv2

In libXfont prior to 1.5.4 and libXfont2 prior to 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.10 X Libxfont

5

CVSSv2

libXcursor prior to 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland up to and i...

Debian Debian Linux 9.0 Debian Debian Linux 8.0 Canonical Ubuntu Linux 17.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.10 X Libxcursor

5

CVSSv2

The gmp plugin in strongSwan prior to 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.

Strongswan Strongswan Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.04

7.5

CVSSv2

Heap-based buffer overflow in dnsmasq prior to 2.78 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Debian Debian Linux 7.1 Debian Debian Linux 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.04 Debian Debian Linux 9.0 Thekelleys Dnsmasq

1 EDB exploit

5

CVSSv2

Memory leak in dnsmasq prior to 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote malicious users to cause a denial of service (memory consumption) via vectors involving DNS response creation.

Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Debian Debian Linux 7.1 Debian Debian Linux 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.04 Debian Debian Linux 9.0 Thekelleys Dnsmasq

1 EDB exploit

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook