Canonical Security Advisories · May 2014 — Canonical Security Advisories
141 advisories 142 CVEs 3 EXPLOITED

Ubuntu Security Notices (USN-NNNN-N) for 2014-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 3 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

USN-2204-1

USNExploitedCISA KEV listedHIGH2014-05-06

linux vulnerability

CVEs:CVE-2014-0196

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
Upstream advisory

USN-2214-1

USNPoC exploitHIGH2014-05-15

libxml2 vulnerability

CVEs:CVE-2014-0191

Affected products

ProductStatusVendorPackageEcosystem
libxml2 affected Ubuntu:14.04:LTS libxml2
Upstream advisory

UBUNTU-CVE-2015-2305

USNEPSS <= 49%MEDIUM2014-05-28

CVEs:CVE-2015-2305

Affected products

ProductStatusVendorPackageEcosystem
clamav affected Ubuntu:14.04:LTS clamav
nvi affected Ubuntu:16.04:LTS nvi
openrpt affected Ubuntu:18.04:LTS openrpt
openrpt affected Ubuntu:16.04:LTS openrpt
php5 affected Ubuntu:14.04:LTS php5
radare2 affected Ubuntu:16.04:LTS radare2
vigor affected Ubuntu:14.04:LTS vigor
Upstream advisory

UBUNTU-CVE-2014-0190

USNEPSS <= 49%LOW2014-05-08

CVEs:CVE-2014-0190

Affected products

ProductStatusVendorPackageEcosystem
qt4-x11 affected Ubuntu:14.04:LTS qt4-x11
qtbase-opensource-src affected Ubuntu:14.04:LTS qtbase-opensource-src
Upstream advisory

USN-2216-1

USNEPSS <= 49%CRITICAL2014-05-21

pidgin vulnerability

CVEs:CVE-2014-3775

Affected products

ProductStatusVendorPackageEcosystem
pidgin affected Ubuntu:14.04:LTS pidgin
Upstream advisory

USN-2190-1

USNEPSS <= 49%HIGH2014-05-01

jbigkit vulnerability

CVEs:CVE-2013-6369

Affected products

ProductStatusVendorPackageEcosystem
jbigkit affected Ubuntu:14.04:LTS jbigkit
Upstream advisory

USN-2213-1

USNEPSS <= 49%HIGH2014-05-15

dovecot vulnerability

CVEs:CVE-2014-3430

Affected products

ProductStatusVendorPackageEcosystem
dovecot affected Ubuntu:14.04:LTS dovecot
Upstream advisory

UBUNTU-CVE-2013-7040

USNEPSS <= 49%LOW2014-05-19

CVEs:CVE-2013-7040

Affected products

ProductStatusVendorPackageEcosystem
compute affected GCP
compute affected Oracle Cloud
python2.7 affected Ubuntu:Pro:14.04:LTS python2.7
Upstream advisory

USN-2212-1

USNEPSS <= 49%2014-05-15

python-django vulnerabilities

CVEs:CVE-2014-1418

Affected products

ProductStatusVendorPackageEcosystem
python-django affected Ubuntu:14.04:LTS python-django
Upstream advisory

UBUNTU-CVE-2014-1343

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1343

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1323

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1323

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1334

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1334

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1339

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1339

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1341

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1341

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1342

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1342

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1326

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1326

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1327

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1327

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1329

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1329

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1330

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1330

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1331

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1331

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1333

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1333

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1335

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1335

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1336

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1336

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1337

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1337

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1338

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1338

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1344

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1344

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-3152

USNEPSS <= 49%MEDIUM2014-05-21

CVEs:CVE-2014-3152

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
libv8-3.14 affected Ubuntu:16.04:LTS libv8-3.14
libv8-3.14 affected Ubuntu:18.04:LTS libv8-3.14
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1346

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1346

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1744

USNEPSS <= 49%MEDIUM2014-05-21

CVEs:CVE-2014-1744

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1740

USNEPSS <= 49%MEDIUM2014-05-14

CVEs:CVE-2014-1740

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1741

USNEPSS <= 49%MEDIUM2014-05-14

CVEs:CVE-2014-1741

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1743

USNEPSS <= 49%MEDIUM2014-05-21

CVEs:CVE-2014-1743

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1324

USNEPSS <= 49%MEDIUM2014-05-22

CVEs:CVE-2014-1324

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1742

USNEPSS <= 49%MEDIUM2014-05-14

CVEs:CVE-2014-1742

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1748

USNEPSS <= 49%MEDIUM2014-05-21

CVEs:CVE-2014-1748

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1746

USNEPSS <= 49%MEDIUM2014-05-21

CVEs:CVE-2014-1746

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3803

USNEPSS <= 49%MEDIUM2014-05-21

CVEs:CVE-2014-3803

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

USN-2210-1

USNEPSS <= 49%CRITICAL2014-05-08

cups-filters vulnerability

CVEs:CVE-2014-2707

Affected products

ProductStatusVendorPackageEcosystem
cups-filters affected Ubuntu:14.04:LTS cups-filters
Upstream advisory

UBUNTU-CVE-2013-6444

USNEPSS <= 49%MEDIUM2014-05-05

CVEs:CVE-2013-6444

Affected products

ProductStatusVendorPackageEcosystem
pywbem affected Ubuntu:16.04:LTS pywbem
pywbem affected Ubuntu:18.04:LTS pywbem
pywbem affected Ubuntu:14.04:LTS pywbem
Upstream advisory

UBUNTU-CVE-2013-7110

USNEPSS <= 49%MEDIUM2014-05-02

CVEs:CVE-2013-7110

Affected products

ProductStatusVendorPackageEcosystem
transifex-client affected Ubuntu:20.04:LTS transifex-client
transifex-client affected Ubuntu:16.04:LTS transifex-client
transifex-client affected Ubuntu:22.04:LTS transifex-client
transifex-client affected Ubuntu:18.04:LTS transifex-client
Upstream advisory

UBUNTU-CVE-2012-5662

USNEPSS <= 49%MEDIUM2014-05-27

CVEs:CVE-2012-5662

Affected products

ProductStatusVendorPackageEcosystem
ibm-3270 affected Ubuntu:24.04:LTS ibm-3270
ibm-3270 affected Ubuntu:20.04:LTS ibm-3270
ibm-3270 affected Ubuntu:22.04:LTS ibm-3270
ibm-3270 affected Ubuntu:18.04:LTS ibm-3270
ibm-3270 affected Ubuntu:25.10 ibm-3270
Upstream advisory

UBUNTU-CVE-2014-0177

USNEPSS <= 49%2014-05-16

CVEs:CVE-2014-0177

Affected products

ProductStatusVendorPackageEcosystem
nodejs affected Ubuntu:Pro:14.04:LTS nodejs
nodejs affected Ubuntu:Pro:18.04:LTS nodejs
nodejs affected Ubuntu:Pro:16.04:LTS nodejs
Upstream advisory

UBUNTU-CVE-2014-3421

USNEPSS <= 49%MEDIUM2014-05-08

CVEs:CVE-2014-3421

Affected products

ProductStatusVendorPackageEcosystem
xemacs21-packages affected Ubuntu:18.04:LTS xemacs21-packages
xemacs21-packages affected Ubuntu:25.10 xemacs21-packages
xemacs21-packages affected Ubuntu:22.04:LTS xemacs21-packages
xemacs21-packages affected Ubuntu:24.04:LTS xemacs21-packages
xemacs21-packages affected Ubuntu:20.04:LTS xemacs21-packages
xemacs21-packages affected Ubuntu:16.04:LTS xemacs21-packages
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.