Canonical Security Advisories · February 2015 — Canonical Security Advisories
109 advisories 144 CVEs 1 EXPLOITED

Ubuntu Security Notices (USN-NNNN-N) for 2015-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

USN-2508-1

USNWeaponized exploitCRITICAL2015-02-23

samba vulnerability

CVEs:CVE-2015-0240

Affected products

ProductStatusVendorPackageEcosystem
samba affected Ubuntu:14.04:LTS samba
Upstream advisory

USN-2500-1

USNWeaponized exploitHIGH2015-02-17

xorg-server, xorg-server-lts-trusty, xorg-server-lts-utopic vulnerabilities

CVEs:CVE-2013-6424CVE-2015-0255

Affected products

ProductStatusVendorPackageEcosystem
xorg-server affected Ubuntu:14.04:LTS xorg-server
xorg-server-lts-utopic affected Ubuntu:14.04:LTS xorg-server-lts-utopic
Upstream advisory

UBUNTU-CVE-2015-0241

USNPoC exploitHIGH2015-02-06

CVEs:CVE-2015-0241

Affected products

ProductStatusVendorPackageEcosystem
postgresql-9.1 affected Ubuntu:14.04:LTS postgresql-9.1
postgresql-9.3 affected Ubuntu:14.04:LTS postgresql-9.3
Upstream advisory

UBUNTU-CVE-2015-0243

USNPoC exploitHIGH2015-02-06

CVEs:CVE-2015-0243

Affected products

ProductStatusVendorPackageEcosystem
postgresql-9.1 affected Ubuntu:14.04:LTS postgresql-9.1
postgresql-9.3 affected Ubuntu:14.04:LTS postgresql-9.3
Upstream advisory

UBUNTU-CVE-2015-0244

USNPoC exploitCRITICAL2015-02-06

CVEs:CVE-2015-0244

Affected products

ProductStatusVendorPackageEcosystem
postgresql-9.1 affected Ubuntu:14.04:LTS postgresql-9.1
postgresql-9.3 affected Ubuntu:14.04:LTS postgresql-9.3
Upstream advisory

UBUNTU-CVE-2014-8161

USNPoC exploitMEDIUM2015-02-06

CVEs:CVE-2014-8161

Affected products

ProductStatusVendorPackageEcosystem
postgresql-9.1 affected Ubuntu:14.04:LTS postgresql-9.1
postgresql-9.3 affected Ubuntu:14.04:LTS postgresql-9.3
Upstream advisory

UBUNTU-CVE-2015-1465

USNEPSS <= 49%MEDIUM2015-02-05

CVEs:CVE-2015-1465

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

UBUNTU-CVE-2015-0886

USNEPSS <= 49%HIGH2015-02-28

CVEs:CVE-2015-0886

Affected products

ProductStatusVendorPackageEcosystem
libjbcrypt-java affected Ubuntu:16.04:LTS libjbcrypt-java
libjbcrypt-java affected Ubuntu:18.04:LTS libjbcrypt-java
Upstream advisory

USN-2488-1

USNEPSS <= 49%CRITICAL2015-02-02

clamav vulnerability

CVEs:CVE-2014-9328

Affected products

ProductStatusVendorPackageEcosystem
clamav affected Ubuntu:14.04:LTS clamav
Upstream advisory

UBUNTU-CVE-2015-1209

USNEPSS <= 49%MEDIUM2015-02-06

CVEs:CVE-2015-1209

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1212

USNEPSS <= 49%MEDIUM2015-02-06

CVEs:CVE-2015-1212

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1211

USNEPSS <= 49%MEDIUM2015-02-06

CVEs:CVE-2015-1211

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1210

USNEPSS <= 49%MEDIUM2015-02-06

CVEs:CVE-2015-1210

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-0275

USNEPSS <= 49%MEDIUM2015-02-23

CVEs:CVE-2015-0275

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

UBUNTU-CVE-2014-5332

USNEPSS <= 49%2015-02-06

CVEs:CVE-2014-5332

Affected products

ProductStatusVendorPackageEcosystem
linux-flo affected Ubuntu:Pro:16.04:LTS linux-flo
linux-goldfish affected Ubuntu:Pro:16.04:LTS linux-goldfish
linux-mako affected Ubuntu:Pro:16.04:LTS linux-mako
Upstream advisory

USN-2516-2

USNAll remainingHIGH2015-02-28

linux vulnerability

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
Upstream advisory

USN-2509-1

USNAll remaining2015-02-23

ca-certificates update

Affected products

ProductStatusVendorPackageEcosystem
ca-certificates affected Ubuntu:14.04:LTS ca-certificates
Upstream advisory

USN-2504-1

USNAll remaining2015-02-19

nss update

Affected products

ProductStatusVendorPackageEcosystem
nss affected Ubuntu:14.04:LTS nss
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.