canonical ubuntu linux 16.10 vulnerabilities and exploits

(subscribe to this query)

An issue exists in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The explo...

Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

Use-after-free vulnerability in pcsc-lite prior to 1.8.20 allows a remote malicious users to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.

Muscle Pcsc-lite Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

In LightDM up to and including 1.22.0, a directory traversal issue in debian/guest-account.sh allows local malicious users to own arbitrary directory path locations and escalate privileges to root when the guest user logs out.

Lightdm Project Lightdm Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 16.04

1 EDB exploit

dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject...

Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Debian Debian Linux 8.0

The apt package in Debian jessie prior to 1.0.9.8.4, in Debian unstable prior to 1.4~beta2, in Ubuntu 14.04 LTS prior to 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS prior to 1.2.15ubuntu0.2, and in Ubuntu 16.10 prior to 1.3.2ubuntu0.1 allows man-in-the-middle malicious users to bypass a...

Debian Advanced Package Tool Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

1 EDB exploit5 Github repositories

Exim prior to 4.87.1 might allow remote malicious users to obtain the private DKIM signing key via vectors related to log files and bounce messages.

Exim Exim Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Debian Debian Linux 8.0

1 Article

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin prior to 1.9.8 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Moinmo Moinmoin Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Debian Debian Linux 8.0

The overlayfs implementation in the Linux kernel up to and including 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.

Linux Linux Kernel Canonical Ubuntu Touch 15.04 Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Core 15.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04

1 EDB exploit

The overlayfs implementation in the Linux kernel up to and including 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.

Canonical Ubuntu Touch 15.04 Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Core 15.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04 Linux Linux Kernel

1 EDB exploit

The gmp plugin in strongSwan prior to 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and process crash) via a crafted certificate.

Strongswan Strongswan Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 17.04

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook