Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Ubuntu_linux
(Canonical)| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2018-03-02 | CVE-2017-15130 | A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart. | Ubuntu_linux, Debian_linux, Dovecot | 5.9 | ||
| 2017-10-05 | CVE-2017-15033 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. | Ubuntu_linux, Imagemagick | 7.5 | ||
| 2017-10-05 | CVE-2017-15032 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. | Ubuntu_linux, Imagemagick | 9.8 | ||
| 2017-09-18 | CVE-2017-14533 | ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c. | Ubuntu_linux, Imagemagick | 6.5 | ||
| 2017-09-18 | CVE-2017-14531 | ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c. | Ubuntu_linux, Imagemagick | 6.5 | ||
| 2017-09-12 | CVE-2017-14343 | ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file. | Ubuntu_linux, Imagemagick | 6.5 | ||
| 2017-09-12 | CVE-2017-14326 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file. | Ubuntu_linux, Imagemagick | 6.5 | ||
| 2017-09-12 | CVE-2017-14325 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file. | Ubuntu_linux, Imagemagick | 6.5 | ||
| 2017-11-27 | CVE-2017-14176 | Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117. | Bazaar, Ubuntu_linux, Debian_linux | 8.8 | ||
| 2018-04-04 | CVE-2017-13305 | A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. | Ubuntu_linux, Debian_linux, Android | 7.1 |