Canonical Security Advisories · April 2015 — Canonical Security Advisories
135 advisories 155 CVEs 3 EXPLOITED

Ubuntu Security Notices (USN-NNNN-N) for 2015-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 3 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

USN-2569-1

USNExploitedCISA KEV listed2015-04-14

apport vulnerability

CVEs:CVE-2015-1318

Affected products

ProductStatusVendorPackageEcosystem
apport affected Ubuntu:14.04:LTS apport
Upstream advisory

UBUNTU-CVE-2015-1126

USNActive exploitation (sightings)MEDIUM2015-04-09

CVEs:CVE-2015-1126

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-2925

USNPoC exploitMEDIUM2015-04-06

CVEs:CVE-2015-2925

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2014-8171

USNPoC exploitMEDIUM2015-04-23

CVEs:CVE-2014-8171

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:16.04:LTS linux
linux affected Ubuntu:14.04:LTS linux
linux-aws affected Ubuntu:14.04:LTS linux-aws
linux-aws affected Ubuntu:16.04:LTS linux-aws
linux-gke affected Ubuntu:16.04:LTS linux-gke
linux-hwe affected Ubuntu:16.04:LTS linux-hwe
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
linux-lts-xenial affected Ubuntu:14.04:LTS linux-lts-xenial
linux-raspi2 affected Ubuntu:16.04:LTS linux-raspi2
linux-snapdragon affected Ubuntu:16.04:LTS linux-snapdragon
Upstream advisory

USN-2559-1

USNEPSS <= 49%CRITICAL2015-04-08

libtasn1-3, libtasn1-6 vulnerability

CVEs:CVE-2015-2806

Affected products

ProductStatusVendorPackageEcosystem
libtasn1-6 affected Ubuntu:14.04:LTS libtasn1-6
Upstream advisory

UBUNTU-CVE-2015-1233

USNEPSS <= 49%MEDIUM2015-04-01

CVEs:CVE-2015-1233

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

USN-2568-1

USNEPSS <= 49%CRITICAL2015-04-13

libx11, libxrender vulnerability

CVEs:CVE-2013-7439

Affected products

ProductStatusVendorPackageEcosystem
libxrender affected Ubuntu:14.04:LTS libxrender
Upstream advisory

UBUNTU-CVE-2015-1122

USNEPSS <= 49%MEDIUM2015-04-09

CVEs:CVE-2015-1122

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
webkitgtk affected Ubuntu:14.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-1120

USNEPSS <= 49%MEDIUM2015-04-09

CVEs:CVE-2015-1120

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:14.04:LTS webkitgtk
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-1242

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1242

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1119

USNEPSS <= 49%MEDIUM2015-04-09

CVEs:CVE-2015-1119

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-1121

USNEPSS <= 49%MEDIUM2015-04-09

CVEs:CVE-2015-1121

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-1124

USNEPSS <= 49%MEDIUM2015-04-09

CVEs:CVE-2015-1124

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

USN-2571-1

USNEPSS <= 49%HIGH2015-04-24

firefox vulnerability

CVEs:CVE-2015-2706

Affected products

ProductStatusVendorPackageEcosystem
firefox affected Ubuntu:14.04:LTS firefox
Upstream advisory

UBUNTU-CVE-2015-1243

USNEPSS <= 49%MEDIUM2015-04-29

CVEs:CVE-2015-1243

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1123

USNEPSS <= 49%MEDIUM2015-04-10

CVEs:CVE-2015-1123

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-1241

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1241

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1250

USNEPSS <= 49%MEDIUM2015-04-29

CVEs:CVE-2015-1250

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1237

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1237

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1235

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1235

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1246

USNEPSS <= 49%LOW2015-04-15

CVEs:CVE-2015-1246

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1238

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1238

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1236

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1236

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1234

USNEPSS <= 49%MEDIUM2015-04-01

CVEs:CVE-2015-1234

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1125

USNEPSS <= 49%MEDIUM2015-04-10

CVEs:CVE-2015-1125

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

UBUNTU-CVE-2015-1244

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1244

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1249

USNEPSS <= 49%MEDIUM2015-04-15

CVEs:CVE-2015-1249

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-3027

USNEPSS <= 49%LOW2015-04-10

CVEs:CVE-2015-3027

Affected products

ProductStatusVendorPackageEcosystem
llvm-toolchain-3.5 affected Ubuntu:16.04:LTS llvm-toolchain-3.5
llvm-toolchain-3.6 affected Ubuntu:14.04:LTS llvm-toolchain-3.6
llvm-toolchain-3.6 affected Ubuntu:16.04:LTS llvm-toolchain-3.6
Upstream advisory

UBUNTU-CVE-2015-1240

USNEPSS <= 49%LOW2015-04-15

CVEs:CVE-2015-1240

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

USN-2557-1

USNEPSS <= 49%NONE2015-04-07

firefox vulnerability

CVEs:CVE-2015-0799

Affected products

ProductStatusVendorPackageEcosystem
firefox affected Ubuntu:14.04:LTS firefox
Upstream advisory

UBUNTU-CVE-2015-3333

USNEPSS <= 49%MEDIUM2015-04-19

CVEs:CVE-2015-3333

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
libv8-3.14 affected Ubuntu:18.04:LTS libv8-3.14
libv8-3.14 affected Ubuntu:16.04:LTS libv8-3.14
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

USN-2581-1

USNEPSS <= 49%MEDIUM2015-04-28

network-manager vulnerability

CVEs:CVE-2015-1322

Affected products

ProductStatusVendorPackageEcosystem
network-manager affected Ubuntu:14.04:LTS network-manager
Upstream advisory

UBUNTU-CVE-2015-3332

USNEPSS <= 49%MEDIUM2015-04-21

CVEs:CVE-2015-3332

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

UBUNTU-CVE-2015-1127

USNEPSS <= 49%MEDIUM2015-04-09

CVEs:CVE-2015-1127

Affected products

ProductStatusVendorPackageEcosystem
qtwebkit-opensource-src affected Ubuntu:16.04:LTS qtwebkit-opensource-src
qtwebkit-source affected Ubuntu:16.04:LTS qtwebkit-source
webkitgtk affected Ubuntu:14.04:LTS webkitgtk
webkitgtk affected Ubuntu:16.04:LTS webkitgtk
Upstream advisory

USN-2576-1

USNAll remaining2015-04-23

usb-creator vulnerability

Affected products

ProductStatusVendorPackageEcosystem
usb-creator affected Ubuntu:14.04:LTS usb-creator
Upstream advisory

USN-2569-2

USNAll remaining2015-04-16

apport vulnerability

Affected products

ProductStatusVendorPackageEcosystem
apport affected Ubuntu:14.04:LTS apport
Upstream advisory

USN-2553-2

USNAll remainingHIGH2015-04-01

tiff regression

Affected products

ProductStatusVendorPackageEcosystem
tiff affected Ubuntu:14.04:LTS tiff
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.