Canonical Security Advisories · November 2015 — Canonical Security Advisories
127 advisories 127 CVEs 4 EXPLOITED

Ubuntu Security Notices (USN-NNNN-N) for 2015-11. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 4 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

UBUNTU-CVE-2015-4852

USNExploitedCISA KEV listed2015-11-13

CVEs:CVE-2015-4852

Affected products

ProductStatusVendorPackageEcosystem
libcommons-collections3-java affected Ubuntu:Pro:14.04:LTS libcommons-collections3-java
openjdk-8 affected Ubuntu:Pro:20.04:LTS openjdk-8
openjdk-8 affected Ubuntu:24.04:LTS openjdk-8
openjdk-8 affected Ubuntu:Pro:16.04:LTS openjdk-8
openjdk-8 affected Ubuntu:22.04:LTS openjdk-8
openjdk-8 affected Ubuntu:Pro:18.04:LTS openjdk-8
Upstream advisory

UBUNTU-CVE-2015-7501

USNExploitedWeaponized exploit2015-11-22

CVEs:CVE-2015-7501

Affected products

ProductStatusVendorPackageEcosystem
libcommons-collections3-java affected Ubuntu:16.04:LTS libcommons-collections3-java
libcommons-collections3-java affected Ubuntu:Pro:14.04:LTS libcommons-collections3-java
libcommons-collections4-java affected Ubuntu:24.04:LTS libcommons-collections4-java
libcommons-collections4-java affected Ubuntu:20.04:LTS libcommons-collections4-java
libcommons-collections4-java affected Ubuntu:18.04:LTS libcommons-collections4-java
libcommons-collections4-java affected Ubuntu:16.04:LTS libcommons-collections4-java
libcommons-collections4-java affected Ubuntu:25.10 libcommons-collections4-java
libcommons-collections4-java affected Ubuntu:22.04:LTS libcommons-collections4-java
Upstream advisory

UBUNTU-CVE-2015-6816

USNPoC exploit2015-11-23

CVEs:CVE-2015-6816

Affected products

ProductStatusVendorPackageEcosystem
ganglia-web affected Ubuntu:20.04:LTS ganglia-web
ganglia-web affected Ubuntu:18.04:LTS ganglia-web
ganglia-web affected Ubuntu:16.04:LTS ganglia-web
Upstream advisory

USN-2818-1

USNPoC exploit2015-11-25

openjdk-7 vulnerability

CVEs:CVE-2015-4871

Affected products

ProductStatusVendorPackageEcosystem
openjdk-7 affected Ubuntu:14.04:LTS openjdk-7
Upstream advisory

UBUNTU-CVE-2015-8104

USNPoC exploit2015-11-10

CVEs:CVE-2015-8104

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
virtualbox affected Ubuntu:18.04:LTS virtualbox
virtualbox affected Ubuntu:22.04:LTS virtualbox
virtualbox affected Ubuntu:24.04:LTS virtualbox
virtualbox affected Ubuntu:14.04:LTS virtualbox
virtualbox affected Ubuntu:25.10 virtualbox
virtualbox affected Ubuntu:20.04:LTS virtualbox
xen affected Ubuntu:22.04:LTS xen
xen affected Ubuntu:16.04:LTS xen
xen affected Ubuntu:18.04:LTS xen
xen affected Ubuntu:20.04:LTS xen
xen affected Ubuntu:25.10 xen
xen affected Ubuntu:14.04:LTS xen
xen affected Ubuntu:24.04:LTS xen
Upstream advisory

USN-2807-1

USNPoC exploit2015-11-10

linux-lts-wily vulnerability

CVEs:CVE-2015-5307

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
Upstream advisory

USN-2806-1

USNPoC exploit2015-11-10

linux-lts-vivid vulnerability

CVEs:CVE-2015-5307

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
Upstream advisory

USN-2805-1

USNPoC exploit2015-11-10

linux-lts-utopic vulnerability

CVEs:CVE-2015-5307

Affected products

ProductStatusVendorPackageEcosystem
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
Upstream advisory

UBUNTU-CVE-2015-5307

USNPoC exploitHIGH2015-11-10

CVEs:CVE-2015-5307

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
virtualbox affected Ubuntu:14.04:LTS virtualbox
xen affected Ubuntu:16.04:LTS xen
xen affected Ubuntu:14.04:LTS xen
Upstream advisory

UBUNTU-CVE-2015-7182

USNEPSS <= 49%2015-11-04

CVEs:CVE-2015-7182

Affected products

ProductStatusVendorPackageEcosystem
firefox affected Ubuntu:14.04:LTS firefox
nss affected Ubuntu:14.04:LTS nss
thunderbird affected Ubuntu:14.04:LTS thunderbird
Upstream advisory

UBUNTU-CVE-2015-7181

USNEPSS <= 49%MEDIUM2015-11-04

CVEs:CVE-2015-7181

Affected products

ProductStatusVendorPackageEcosystem
firefox affected Ubuntu:14.04:LTS firefox
nss affected Ubuntu:14.04:LTS nss
thunderbird affected Ubuntu:14.04:LTS thunderbird
Upstream advisory

UBUNTU-CVE-2015-7183

USNEPSS <= 49%MEDIUM2015-11-04

CVEs:CVE-2015-7183

Affected products

ProductStatusVendorPackageEcosystem
firefox affected Ubuntu:16.04:LTS firefox
firefox affected Ubuntu:14.04:LTS firefox
nspr affected Ubuntu:14.04:LTS nspr
thunderbird affected Ubuntu:14.04:LTS thunderbird
virtualbox affected Ubuntu:14.04:LTS virtualbox
Upstream advisory

USN-2816-1

USNEPSS <= 49%2015-11-24

python-django vulnerability

CVEs:CVE-2015-8213

Affected products

ProductStatusVendorPackageEcosystem
python-django affected Ubuntu:14.04:LTS python-django
Upstream advisory

UBUNTU-CVE-2015-8215

USNEPSS <= 49%MEDIUM2015-11-16

CVEs:CVE-2015-8215

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
Upstream advisory

USN-2811-1

USNEPSS <= 49%2015-11-16

strongswan vulnerability

CVEs:CVE-2015-8023

Affected products

ProductStatusVendorPackageEcosystem
strongswan affected Ubuntu:14.04:LTS strongswan
Upstream advisory

UBUNTU-CVE-2015-3182

USNEPSS <= 49%2015-11-19

CVEs:CVE-2015-3182

Affected products

ProductStatusVendorPackageEcosystem
wireshark affected Ubuntu:14.04:LTS wireshark
wireshark affected Ubuntu:18.04:LTS wireshark
wireshark affected Ubuntu:16.04:LTS wireshark
Upstream advisory

UBUNTU-CVE-2015-5218

USNEPSS <= 49%LOW2015-11-09

CVEs:CVE-2015-5218

Affected products

ProductStatusVendorPackageEcosystem
bsdmainutils affected Ubuntu:18.04:LTS bsdmainutils
bsdmainutils affected Ubuntu:20.04:LTS bsdmainutils
Upstream advisory

UBUNTU-CVE-2015-7872

USNEPSS <= 49%MEDIUM2015-11-16

CVEs:CVE-2015-7872

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-azure affected Ubuntu:18.04:LTS linux-azure
linux-azure-6.11 affected Ubuntu:24.04:LTS linux-azure-6.11
linux-azure-fde affected Ubuntu:20.04:LTS linux-azure-fde
linux-azure-fde-5.15 affected Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15
linux-gcp affected Ubuntu:18.04:LTS linux-gcp
linux-gcp-6.11 affected Ubuntu:24.04:LTS linux-gcp-6.11
linux-gke affected Ubuntu:20.04:LTS linux-gke
linux-gkeop affected Ubuntu:20.04:LTS linux-gkeop
linux-hwe affected Ubuntu:18.04:LTS linux-hwe
linux-hwe-6.11 affected Ubuntu:24.04:LTS linux-hwe-6.11
linux-hwe-edge affected Ubuntu:18.04:LTS linux-hwe-edge
linux-intel-iot-realtime affected Ubuntu:22.04:LTS linux-intel-iot-realtime
linux-lowlatency-hwe-6.11 affected Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
linux-raspi2 affected Ubuntu:20.04:LTS linux-raspi2
linux-raspi-realtime affected Ubuntu:24.04:LTS linux-raspi-realtime
linux-realtime affected Ubuntu:22.04:LTS linux-realtime
linux-realtime affected Ubuntu:24.04:LTS linux-realtime
linux-riscv affected Ubuntu:24.04:LTS linux-riscv
linux-riscv affected Ubuntu:20.04:LTS linux-riscv
linux-riscv affected Ubuntu:22.04:LTS linux-riscv
Upstream advisory

USN-2814-1

USNEPSS <= 49%NONE2015-11-18

nvidia-graphics-drivers-304, nvidia-graphics-drivers-304-updates, nvidia-graphics-drivers-340, nvidia-graphics-drivers-340-updates, nvidia-graphics-drivers-352, nvidia-graphics-drivers-352-updates vulnerability

CVEs:CVE-2015-7869

Affected products

ProductStatusVendorPackageEcosystem
nvidia-graphics-drivers-304 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304
nvidia-graphics-drivers-304-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304-updates
nvidia-graphics-drivers-340 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-340
nvidia-graphics-drivers-340-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-340-updates
nvidia-graphics-drivers-352 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-352
nvidia-graphics-drivers-352-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-352-updates
Upstream advisory

UBUNTU-CVE-2015-7869

USNEPSS <= 49%MEDIUM2015-11-18

CVEs:CVE-2015-7869

Affected products

ProductStatusVendorPackageEcosystem
nvidia-graphics-drivers-304 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304
nvidia-graphics-drivers-304-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-304-updates
nvidia-graphics-drivers-340 affected Ubuntu:14.04:LTS nvidia-graphics-drivers-340
nvidia-graphics-drivers-340-updates affected Ubuntu:14.04:LTS nvidia-graphics-drivers-340-updates
Upstream advisory

UBUNTU-CVE-2015-7990

USNEPSS <= 49%2015-11-26

CVEs:CVE-2015-7990

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
Upstream advisory

UBUNTU-CVE-2015-4170

USNEPSS <= 49%2015-11-19

CVEs:CVE-2015-4170

Affected products

ProductStatusVendorPackageEcosystem
linux affected Ubuntu:14.04:LTS linux
linux affected Ubuntu:16.04:LTS linux
linux-aws affected Ubuntu:14.04:LTS linux-aws
linux-aws affected Ubuntu:16.04:LTS linux-aws
linux-gke affected Ubuntu:16.04:LTS linux-gke
linux-hwe affected Ubuntu:16.04:LTS linux-hwe
linux-lts-utopic affected Ubuntu:14.04:LTS linux-lts-utopic
linux-lts-vivid affected Ubuntu:14.04:LTS linux-lts-vivid
linux-lts-wily affected Ubuntu:14.04:LTS linux-lts-wily
linux-lts-xenial affected Ubuntu:14.04:LTS linux-lts-xenial
linux-raspi2 affected Ubuntu:16.04:LTS linux-raspi2
linux-snapdragon affected Ubuntu:16.04:LTS linux-snapdragon
Upstream advisory

USN-2821-1

USNAll remainingNONE2015-11-30

gnutls26 vulnerability

Affected products

ProductStatusVendorPackageEcosystem
gnutls26 affected Ubuntu:14.04:LTS gnutls26
Upstream advisory

USN-2788-2

USNAll remaining2015-11-09

unzip regression

Affected products

ProductStatusVendorPackageEcosystem
unzip affected Ubuntu:14.04:LTS unzip
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.