Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

canonical ubuntu linux 14.10 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-1321
Use-after-free vulnerability in the file picker implementation in Oxide prior to 1.6.5 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 15.1Oxide Project Oxide
NA
CVE-2015-3310
Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and previous versions, when the PID for pppd is greater than 65535, allows remote malicious users to cause a denial of service (crash) via a start accounting message to the RA...
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Debian Debian Linux 7.0Point-to-point Protocol Project Point-to-point Protocol
NA
CVE-2015-3144
The fix_hostname function in cURL and libcurl 7.37.0 up to and including 7.41.0 does not properly calculate an index, which allows remote malicious users to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-leng...
Oracle Mysql Enterprise MonitorHaxx Curl 7.39.0Haxx Curl 7.40.0Haxx Curl 7.37.0Haxx Curl 7.41.0Haxx Curl 7.37.1Haxx Curl 7.38.0Haxx Libcurl 7.40.0Haxx Libcurl 7.41.0Haxx Libcurl 7.37.0Haxx Libcurl 7.37.1Haxx Libcurl 7.38.0Haxx Libcurl 7.39Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.04Debian Debian Linux 7.0
NA
CVE-2015-3145
The sanitize_cookie_path function in cURL and libcurl 7.31.0 up to and including 7.41.0 does not properly calculate an index, which allows remote malicious users to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie pa...
Fedoraproject Fedora 21Fedoraproject Fedora 22Canonical Ubuntu Linux 12.04Debian Debian Linux 7.0Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Haxx Curl 7.37.1Haxx Curl 7.38.0Haxx Curl 7.33.0Haxx Curl 7.34.0Haxx Curl 7.35.0Haxx Curl 7.41.0Haxx Curl 7.36.0Haxx Curl 7.37.0Haxx Curl 7.31.0Haxx Curl 7.32.0Haxx Curl 7.39.0Haxx Curl 7.40.0Apple Mac Os X 10.10.2Apple Mac Os X 10.10.3Apple Mac Os X 10.10.0
NA
CVE-2015-3333
Multiple unspecified vulnerabilities in Google V8 prior to 4.2.77.14, as used in Google Chrome prior to 42.0.2311.90, allow malicious users to cause a denial of service or possibly have other impact via unknown vectors.
Google V8Debian Debian Linux 8.0Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Google Chrome
NA
CVE-2013-7439
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 prior to 1.6.0 allow remote malicious users to have unspecified impact via a crafted request, which triggers a buffer overflow.
X.org Libx11 1.4.99.902X.org Libx11 1.4.99.901X.org Libx11 1.3.99.901X.org Libx11 1.3.6X.org Libx11 1.2.2X.org Libx11 1.2.1X.org Libx11 1.1.99.1X.org Libx11 1.1X.org Libx11 1.4.4X.org Libx11 1.4.3X.org Libx11 1.3.5X.org Libx11 1.3.4X.org Libx11 1.2X.org Libx11 1.1.6X.org Libx11 1.0.1X.org Libx11 1.5.99.902X.org Libx11 1.4.2X.org Libx11 1.4.1X.org Libx11 1.3.3X.org Libx11 1.3.2X.org Libx11 1.1.5X.org Libx11 1.1.4
NA
CVE-2015-0840
The dpkg-source command in Debian dpkg prior to 1.16.16 and 1.17.x prior to 1.17.25 allows remote malicious users to bypass signature verification via a crafted Debian source control file (.dsc).
Debian Dpkg 1.17.1Debian Dpkg 1.17.2Debian Dpkg 1.17.5Debian Dpkg 1.17.6Debian Dpkg 1.17.7Debian Dpkg 1.17.14Debian Dpkg 1.17.15Debian Dpkg 1.17.22Debian Dpkg 1.17.23Debian DpkgDebian Dpkg 1.17.0Debian Dpkg 1.17.8Debian Dpkg 1.17.9Debian Dpkg 1.17.16Debian Dpkg 1.17.17Debian Dpkg 1.17.24Debian Dpkg 1.17.10Debian Dpkg 1.17.11Debian Dpkg 1.17.18Debian Dpkg 1.17.19Debian Dpkg 1.17.3Debian Dpkg 1.17.4
NA
CVE-2015-1317
Use-after-free vulnerability in Oxide prior to 1.5.6 and 1.6.x prior to 1.6.1 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.
Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Oxide Project Oxide 1.6.0Oxide Project Oxide
NA
CVE-2015-0799
The HTTP Alternative Services feature in Mozilla Firefox prior to 37.0.1 allows man-in-the-middle malicious users to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Opensuse Opensuse 13.2Opensuse Opensuse 13.1Mozilla Firefox
NA
CVE-2015-1465
The IPv4 implementation in the Linux kernel prior to 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote malicious users to cause a denial of service (memory consumption or ...
Linux Linux KernelCanonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook