Canonical Security Advisories · June 2015 — Canonical Security Advisories
104 advisories 113 CVEs 5 EXPLOITED

Ubuntu Security Notices (USN-NNNN-N) for 2015-06. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 5 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

USN-2645-1

USNExploitedVulnCheck KEV listed2015-06-15

linux-lts-vivid vulnerability

CVEs:CVE-2015-1328

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

USN-2644-1

USNExploitedVulnCheck KEV listed2015-06-15

linux-lts-utopic vulnerability

CVEs:CVE-2015-1328

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

USN-2643-1

USNExploitedVulnCheck KEV listedHIGH2015-06-15

linux vulnerability

CVEs:CVE-2015-1328

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
Upstream advisory

UBUNTU-CVE-2015-1328

USNExploitedVulnCheck KEV listedHIGH2015-06-15

CVEs:CVE-2015-1328

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

USN-2648-1

USNWeaponized exploit2015-06-16

aptdaemon vulnerability

CVEs:CVE-2015-1323

Affected products

ProductStatusVendorPackageEcosystem
aptdaemon affected Ubuntu:14.04:LTS aptdaemon
Upstream advisory

UBUNTU-CVE-2015-4002

USNPoC exploitMEDIUM2015-06-07

CVEs:CVE-2015-4002

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

UBUNTU-CVE-2014-9732

USNPoC exploitMEDIUM2015-06-11

CVEs:CVE-2014-9732

Affected products

ProductStatusVendorPackageEcosystem
cabextract affected Ubuntu:Pro:14.04:LTS cabextract
libmspack affected Ubuntu:Pro:14.04:LTS libmspack
Upstream advisory

UBUNTU-CVE-2015-1805

USNPoC exploitMEDIUM2015-06-03

CVEs:CVE-2015-1805

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2015-4167

USNPoC exploitMEDIUM2015-06-03

CVEs:CVE-2015-4167

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
Upstream advisory

UBUNTU-CVE-2015-4004

USNEPSS <= 49%MEDIUM2015-06-07

CVEs:CVE-2015-4004

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
Upstream advisory

UBUNTU-CVE-2015-4001

USNEPSS <= 49%MEDIUM2015-06-07

CVEs:CVE-2015-4001

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

UBUNTU-CVE-2015-4003

USNEPSS <= 49%MEDIUM2015-06-07

CVEs:CVE-2015-4003

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

USN-2649-1

USNEPSS <= 49%2015-06-16

devscripts vulnerability

CVEs:CVE-2014-1833

Affected products

ProductStatusVendorPackageEcosystem
devscripts affected Ubuntu:14.04:LTS devscripts
Upstream advisory

UBUNTU-CVE-2015-1268

USNEPSS <= 49%MEDIUM2015-06-26

CVEs:CVE-2015-1268

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-3395

USNEPSS <= 49%LOW2015-06-16

CVEs:CVE-2015-3395

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:16.04:LTS chromium-browser
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
libav affected Ubuntu:Pro:14.04:LTS libav
Upstream advisory

UBUNTU-CVE-2015-4471

USNEPSS <= 49%MEDIUM2015-06-11

CVEs:CVE-2015-4471

Affected products

ProductStatusVendorPackageEcosystem
cabextract affected Ubuntu:Pro:14.04:LTS cabextract
libmspack affected Ubuntu:Pro:14.04:LTS libmspack
Upstream advisory

USN-2628-1

USNEPSS <= 49%2015-06-08

strongswan vulnerability

CVEs:CVE-2015-4171

Affected products

ProductStatusVendorPackageEcosystem
strongswan affected Ubuntu:14.04:LTS strongswan
Upstream advisory

UBUNTU-CVE-2015-1269

USNEPSS <= 49%MEDIUM2015-06-26

CVEs:CVE-2015-1269

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1266

USNEPSS <= 49%MEDIUM2015-06-26

CVEs:CVE-2015-1266

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-1267

USNEPSS <= 49%MEDIUM2015-06-26

CVEs:CVE-2015-1267

Affected products

ProductStatusVendorPackageEcosystem
chromium-browser affected Ubuntu:14.04:LTS chromium-browser
oxide-qt affected Ubuntu:14.04:LTS oxide-qt
Upstream advisory

UBUNTU-CVE-2015-4470

USNEPSS <= 49%MEDIUM2015-06-11

CVEs:CVE-2015-4470

Affected products

ProductStatusVendorPackageEcosystem
cabextract affected Ubuntu:Pro:14.04:LTS cabextract
libmspack affected Ubuntu:Pro:14.04:LTS libmspack
Upstream advisory

USN-2657-1

USNEPSS <= 49%2015-06-29

unattended-upgrades vulnerability

CVEs:CVE-2015-1330

Affected products

ProductStatusVendorPackageEcosystem
unattended-upgrades affected Ubuntu:14.04:LTS unattended-upgrades
Upstream advisory

UBUNTU-CVE-2015-4700

USNEPSS <= 49%LOW2015-06-24

CVEs:CVE-2015-4700

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

UBUNTU-CVE-2015-4692

USNEPSS <= 49%LOW2015-06-22

CVEs:CVE-2015-4692

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

UBUNTU-CVE-2015-3212

USNEPSS <= 49%MEDIUM2015-06-30

CVEs:CVE-2015-3212

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

USN-2644-2

USNAll remaining2015-06-21

linux-lts-utopic regression

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

USN-2643-2

USNAll remainingHIGH2015-06-21

linux regression

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
Upstream advisory

USN-2624-1

USNAll remaining2015-06-01

openssl update

Affected products

ProductStatusVendorPackageEcosystem
openssl affected Ubuntu:14.04:LTS openssl
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.