Canonical Security Advisories · December 2014 — Canonical Security Advisories
168 advisories 185 CVEs

Ubuntu Security Notices (USN-NNNN-N) for 2014-12. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

UBUNTU-CVE-2014-9390

USNWeaponized exploitCRITICAL2014-12-18

CVEs:CVE-2014-9390

Affected products

ProductStatusVendorPackageEcosystem
git affected Ubuntu:14.04:LTS git
libgit2 affected Ubuntu:Pro:14.04:LTS libgit2
mercurial affected Ubuntu:14.04:LTS mercurial
Upstream advisory

UBUNTU-CVE-2014-4322

USNActive exploitation (sightings)2014-12-24

CVEs:CVE-2014-4322

Affected products

ProductStatusVendorPackageEcosystem
linux-flo affected Ubuntu:Pro:16.04:LTS linux-flo
linux-goldfish affected Ubuntu:Pro:16.04:LTS linux-goldfish
linux-mako affected Ubuntu:Pro:16.04:LTS linux-mako
Upstream advisory

UBUNTU-CVE-2014-9130

USNPoC exploitMEDIUM2014-12-08

CVEs:CVE-2014-9130

Affected products

ProductStatusVendorPackageEcosystem
libyaml affected Ubuntu:14.04:LTS libyaml
libyaml-libyaml-perl affected Ubuntu:14.04:LTS libyaml-libyaml-perl
pyyaml affected Ubuntu:14.04:LTS pyyaml
Upstream advisory

UBUNTU-CVE-2014-4323

USNPoC exploitHIGH2014-12-12

CVEs:CVE-2014-4323

Affected products

ProductStatusVendorPackageEcosystem
linux-aws-fips affected Ubuntu:Pro:FIPS-updates:24.04:LTS linux-aws-fips
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fips affected Ubuntu:Pro:FIPS-updates:24.04:LTS linux-azure-fips
linux-fips affected Ubuntu:Pro:FIPS-updates:24.04:LTS linux-fips
linux-gcp-fips affected Ubuntu:Pro:FIPS-updates:24.04:LTS linux-gcp-fips
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-gkeop-5.15 affected Ubuntu:20.04:LTS linux-gkeop-5.15
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2014-3591

USNPoC exploitMEDIUM2014-12-31

CVEs:CVE-2014-3591

Affected products

ProductStatusVendorPackageEcosystem
gnupg affected Ubuntu:14.04:LTS gnupg
libgcrypt11 affected Ubuntu:14.04:LTS libgcrypt11
libgcrypt20 affected Ubuntu:14.04:LTS libgcrypt20
Upstream advisory

UBUNTU-CVE-2014-9728

USNPoC exploitMEDIUM2014-12-31

CVEs:CVE-2014-9728

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2014-9730

USNPoC exploitMEDIUM2014-12-31

CVEs:CVE-2014-9730

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2014-9729

USNPoC exploitMEDIUM2014-12-31

CVEs:CVE-2014-9729

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
Upstream advisory

USN-2435-1

USNEPSS <= 49%CRITICAL2014-12-09

graphviz vulnerability

CVEs:CVE-2014-9157

Affected products

ProductStatusVendorPackageEcosystem
graphviz affected Ubuntu:14.04:LTS graphviz
Upstream advisory

USN-2438-1

USNEPSS <= 49%HIGH2014-12-10

nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-331, nvidia-graphics-drivers-331-updates vulnerabilities

CVEs:CVE-2014-8091CVE-2014-8098CVE-2014-8298

Affected products

ProductStatusVendorPackageEcosystem
nvidia-graphics-drivers-304 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304
nvidia-graphics-drivers-304-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304-updates
nvidia-graphics-drivers-331 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-331
nvidia-graphics-drivers-331-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-331-updates
Upstream advisory

UBUNTU-CVE-2014-4466

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4466

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-8298

USNEPSS <= 49%MEDIUM2014-12-10

CVEs:CVE-2014-8298

Affected products

ProductStatusVendorPackageEcosystem
nvidia-graphics-drivers-304 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304
nvidia-graphics-drivers-304-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304-updates
nvidia-graphics-drivers-331 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-331
nvidia-graphics-drivers-331-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-331-updates
Upstream advisory

UBUNTU-CVE-2013-7401

USNEPSS <= 49%MEDIUM2014-12-19

CVEs:CVE-2013-7401

Affected products

ProductStatusVendorPackageEcosystem
c-icap affected Ubuntu:18.04:LTS c-icap
c-icap affected Ubuntu:25.10 c-icap
c-icap affected Ubuntu:16.04:LTS c-icap
c-icap affected Ubuntu:22.04:LTS c-icap
c-icap affected Ubuntu:24.04:LTS c-icap
c-icap affected Ubuntu:20.04:LTS c-icap
Upstream advisory

UBUNTU-CVE-2013-7402

USNEPSS <= 49%MEDIUM2014-12-17

CVEs:CVE-2013-7402

Affected products

ProductStatusVendorPackageEcosystem
c-icap affected Ubuntu:18.04:LTS c-icap
c-icap affected Ubuntu:25.10 c-icap
c-icap affected Ubuntu:20.04:LTS c-icap
c-icap affected Ubuntu:16.04:LTS c-icap
c-icap affected Ubuntu:22.04:LTS c-icap
c-icap affected Ubuntu:24.04:LTS c-icap
Upstream advisory

UBUNTU-CVE-2014-4471

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4471

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4473

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4473

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4474

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4474

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4468

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4468

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4469

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4469

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4470

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4470

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4472

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4472

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-4475

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4475

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-9236

USNEPSS <= 49%LOW2014-12-03

CVEs:CVE-2014-9236

Affected products

ProductStatusVendorPackageEcosystem
zoph affected Ubuntu:22.04:LTS zoph
zoph affected Ubuntu:24.04:LTS zoph
zoph affected Ubuntu:25.10 zoph
zoph affected Ubuntu:20.04:LTS zoph
zoph affected Ubuntu:18.04:LTS zoph
Upstream advisory

UBUNTU-CVE-2014-4465

USNEPSS <= 49%MEDIUM2014-12-05

CVEs:CVE-2014-4465

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
Upstream advisory

UBUNTU-CVE-2014-9235

USNEPSS <= 49%MEDIUM2014-12-03

CVEs:CVE-2014-9235

Affected products

ProductStatusVendorPackageEcosystem
zoph affected Ubuntu:22.04:LTS zoph
zoph affected Ubuntu:24.04:LTS zoph
zoph affected Ubuntu:25.10 zoph
zoph affected Ubuntu:20.04:LTS zoph
zoph affected Ubuntu:18.04:LTS zoph
Upstream advisory

UBUNTU-CVE-2014-9644

USNEPSS <= 49%MEDIUM2014-12-31

CVEs:CVE-2014-9644

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

UBUNTU-CVE-2014-9731

USNEPSS <= 49%MEDIUM2014-12-31

CVEs:CVE-2014-9731

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2014-9710

USNEPSS <= 49%LOW2014-12-31

CVEs:CVE-2014-9710

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
Upstream advisory

USN-2447-2

USNAll remaining2014-12-19

linux-lts-utopic regression

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

USN-2436-2

USNAll remainingHIGH2014-12-10

xorg-server, xorg-server-lts-trusty vulnerabilities

Affected products

ProductStatusVendorPackageEcosystem
xorg-server affected Ubuntu:14.04:LTS xorg-server
Upstream advisory

USN-2431-2

USNAll remaining2014-12-04

maas regression

Affected products

ProductStatusVendorPackageEcosystem
maas affected Ubuntu:14.04:LTS maas
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.