CVE-2015-1315

unzip: charset_to_intern() buffer overflow

Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8.

CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Info-zip

Products

Ubuntu Linux Unzip

CVE-2015-1283

chromium-browser: Heap-buffer-overflow in expat.

Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.

CVSS 2.0 · 6.8 Medium EPSS 18.3% KEV · Not listed

Vendors

Canonical Debian Google and 6 more

Products

Ubuntu Linux Debian Linux Chrome and 11 more

CVE-2016-6261

libidn: Out of bounds stack read in idna_to_ascii_4i

The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.

CVSS 3.0 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Canonical Gnu Opensuse

Products

Ubuntu Linux Libidn Leap

CVE-2015-1250

chromium-browser: various unspecified flaws

Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 5 more

CVE-2015-1249

chromium-browser: Various fixes from internal audits, fuzzing and other initiatives

Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more

CVE-2016-3521

mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

CVSS 3.0 · 6.5 Medium EPSS 10.4% KEV · Not listed

Vendors

Canonical Debian Ibm and 3 more

Products

Ubuntu Linux Debian Linux Powerkvm and 5 more

CVE-2016-6262

libidn: Out-of-bounds read when reading zero byte as input

idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.

CVSS 3.0 · 7.5 High EPSS 6.5% KEV · Not listed

Vendors

Canonical Gnu Opensuse

Products

Ubuntu Linux Libidn Leap and 1 more

CVE-2016-6352

gdk-pixbuf: Out-of-bounds write in OneLine32() function

The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed

Vendors

Canonical Gnome Opensuse

Products

Ubuntu Linux Gdk-pixbuf Leap and 1 more

CVE-2015-1244

chromium-browser: HSTS bypass in WebSockets

The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more

CVE-2015-1243

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 5 more

CVE-2016-6185

perl: XSLoader loads relative paths not included in @INC

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 2 more

Products

Ubuntu Linux Debian Linux Fedora and 2 more

CVE-2015-1242

chromium-browser: Type confusion in V8

The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 2 more

CVE-2015-1241

chromium-browser: tap-jacking vulnerability

Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed

Vendors

Canonical Debian Google and 3 more

Products

Ubuntu Linux Debian Linux Chrome and 9 more

CVE-2016-3698

libndp: denial of service due to insufficient validation of source of NDP messages

libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.

CVSS 3.0 · 8.1 High EPSS 3.8% KEV · Not listed

Vendors

Canonical Debian Libndp and 1 more

Products

Ubuntu Linux Debian Linux Libndp and 8 more

CVE-2016-6224

ecryptfs-utils: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Ecryptfs

Products

Ubuntu Linux Ecryptfs-utils

CVE-2015-1240

chromium-browser: Out-of-bounds read in WebGL

gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more

CVE-2015-1238

chromium-browser: Out-of-bounds write in Skia

Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more

CVE-2016-5829

kernel: Heap buffer overflow in hiddev driver

Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a denial of service or possibly have unspecified other impact via a crafted (1) HIDIOCGUSAGES or (2) HIDIOCSUSAGES ioctl call.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 2 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 3 more

CVE-2015-1237

chromium-browser: Use-after-free in IPC

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more

CVE-2015-1236

chromium-browser: Cross-origin-bypass in Blink

The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 1 more