Canonical Security Advisories · August 2014 — Canonical Security Advisories
166 advisories 188 CVEs

Ubuntu Security Notices (USN-NNNN-N) for 2014-08. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

USN-2328-1

USNWeaponized exploitCRITICAL2014-08-29

eglibc vulnerability

CVEs:CVE-2014-5119

Affected products

ProductStatusVendorPackageEcosystem
eglibc affected Ubuntu:14.04:LTS eglibc
Upstream advisory

UBUNTU-CVE-2014-5266

USNActive exploitation (sightings)MEDIUM2014-08-18

CVEs:CVE-2014-5266

Affected products

ProductStatusVendorPackageEcosystem
drupal7 affected Ubuntu:Pro:14.04:LTS drupal7
wordpress affected Ubuntu:14.04:LTS wordpress
Upstream advisory

UBUNTU-CVE-2015-0501

USNPoC exploitMEDIUM2014-08-19

CVEs:CVE-2015-0501

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6491

USNPoC exploitMEDIUM2014-08-19

CVEs:CVE-2014-6491

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6500

USNPoC exploitMEDIUM2014-08-19

CVEs:CVE-2014-6500

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6494

USNPoC exploitMEDIUM2014-08-19

CVEs:CVE-2014-6494

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6559

USNPoC exploitMEDIUM2014-08-19

CVEs:CVE-2014-6559

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6496

USNPoC exploitMEDIUM2014-08-19

CVEs:CVE-2014-6496

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-1384

USNPoC exploitMEDIUM2014-08-14

CVEs:CVE-2014-1384

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1385

USNPoC exploitMEDIUM2014-08-14

CVEs:CVE-2014-1385

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1387

USNPoC exploitMEDIUM2014-08-14

CVEs:CVE-2014-1387

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1388

USNPoC exploitMEDIUM2014-08-14

CVEs:CVE-2014-1388

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1389

USNPoC exploitMEDIUM2014-08-14

CVEs:CVE-2014-1389

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2015-0382

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0382

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0411

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0411

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-3577

USNEPSS <= 49%MEDIUM2014-08-18

CVEs:CVE-2014-3577

Affected products

ProductStatusVendorPackageEcosystem
commons-httpclient affected Ubuntu:14.04:LTS commons-httpclient
httpcomponents-client affected Ubuntu:14.04:LTS httpcomponents-client
Upstream advisory

UBUNTU-CVE-2014-6507

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2014-6507

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6568

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2014-6568

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-2568

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-2568

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0381

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0381

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0433

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0433

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-2571

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-2571

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-2573

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-2573

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0505

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0505

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0499

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0499

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0441

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0441

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6469

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2014-6469

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

USN-2307-1

USNEPSS <= 49%CRITICAL2014-08-06

gpgme1.0 vulnerability

CVEs:CVE-2014-3564

Affected products

ProductStatusVendorPackageEcosystem
gpgme1.0 affected Ubuntu:14.04:LTS gpgme1.0
Upstream advisory

UBUNTU-CVE-2014-6464

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2014-6464

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2014-6555

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2014-6555

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

UBUNTU-CVE-2015-0374

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2015-0374

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

USN-2311-2

USNEPSS <= 49%2014-08-21

ceilometer vulnerability

CVEs:CVE-2014-4615

Affected products

ProductStatusVendorPackageEcosystem
ceilometer affected Ubuntu:14.04:LTS ceilometer
Upstream advisory

USN-2311-1

USNEPSS <= 49%2014-08-11

python-pycadf vulnerability

CVEs:CVE-2014-4615

Affected products

ProductStatusVendorPackageEcosystem
python-pycadf affected Ubuntu:14.04:LTS python-pycadf
Upstream advisory

UBUNTU-CVE-2014-3169

USNEPSS <= 49%MEDIUM2014-08-26

CVEs:CVE-2014-3169

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-1386

USNEPSS <= 49%MEDIUM2014-08-14

CVEs:CVE-2014-1386

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-1390

USNEPSS <= 49%MEDIUM2014-08-14

CVEs:CVE-2014-1390

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-3168

USNEPSS <= 49%MEDIUM2014-08-26

CVEs:CVE-2014-3168

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3165

USNEPSS <= 49%MEDIUM2014-08-13

CVEs:CVE-2014-3165

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3171

USNEPSS <= 49%MEDIUM2014-08-26

CVEs:CVE-2014-3171

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3173

USNEPSS <= 49%MEDIUM2014-08-26

CVEs:CVE-2014-3173

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3174

USNEPSS <= 49%MEDIUM2014-08-26

CVEs:CVE-2014-3174

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3166

USNEPSS <= 49%MEDIUM2014-08-13

CVEs:CVE-2014-3166

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3175

USNEPSS <= 49%MEDIUM2014-08-26

CVEs:CVE-2014-3175

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-3167

USNEPSS <= 49%MEDIUM2014-08-13

CVEs:CVE-2014-3167

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2014-4274

USNEPSS <= 49%MEDIUM2014-08-19

CVEs:CVE-2014-4274

Affected products

ProductStatusVendorPackageEcosystem
mariadb-5.5 affected Ubuntu:14.04:LTS mariadb-5.5
mysql-5.5 affected Ubuntu:14.04:LTS mysql-5.5
mysql-5.6 affected Ubuntu:14.04:LTS mysql-5.6
Upstream advisory

USN-2319-2

USNAll remaining2014-08-26

openjdk-7 regression

Affected products

ProductStatusVendorPackageEcosystem
openjdk-7 affected Ubuntu:14.04:LTS openjdk-7
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.