{"cves":[{"id":"CVE-2017-12875","published":"2017-08-29T00:00:00","updated_at":"2025-08-25T22:22:44.656460+00:00","description":"\nThe WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote\nattackers to cause a denial of service (CPU consumption) via a crafted\nfile.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"0305-CVE-2017-12875-Fix-CPU-consumption-in-WritePixelCachePixels.patch in wheezy"}],"codename":null,"priority":"low","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3681-1","https://www.cve.org/CVERecord?id=CVE-2017-12875"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/659","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873871"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/6f95e543c80319721e22d623bb23712cd29afa9e"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"artful","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.11","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8:6.9.9.34+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.11","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":["USN-3681-1"],"notices":[{"id":"USN-3681-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-12T11:40:14.599634","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"artful":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-10995","CVE-2017-11352","CVE-2017-11533","CVE-2017-11535","CVE-2017-11537","CVE-2017-11639","CVE-2017-11640","CVE-2017-12140","CVE-2017-12418","CVE-2017-12429","CVE-2017-12430","CVE-2017-12431","CVE-2017-12432","CVE-2017-12433","CVE-2017-12435","CVE-2017-12563","CVE-2017-12587","CVE-2017-12640","CVE-2017-12643","CVE-2017-12644","CVE-2017-12670","CVE-2017-12674","CVE-2017-12691","CVE-2017-12692","CVE-2017-12693","CVE-2017-12875","CVE-2017-12877","CVE-2017-12983","CVE-2017-13058","CVE-2017-13059","CVE-2017-13060","CVE-2017-13061","CVE-2017-13062","CVE-2017-13131","CVE-2017-13134","CVE-2017-13139","CVE-2017-13142","CVE-2017-13143","CVE-2017-13144","CVE-2017-13145","CVE-2017-13758","CVE-2017-13768","CVE-2017-13769","CVE-2017-14060","CVE-2017-14172","CVE-2017-14173","CVE-2017-14174","CVE-2017-14175","CVE-2017-14224","CVE-2017-14249","CVE-2017-14325","CVE-2017-14326","CVE-2017-14341","CVE-2017-14342","CVE-2017-14343","CVE-2017-14400","CVE-2017-14505","CVE-2017-14531","CVE-2017-14532","CVE-2017-14533","CVE-2017-14607","CVE-2017-14624","CVE-2017-14625","CVE-2017-14626","CVE-2017-14682","CVE-2017-14684","CVE-2017-14739","CVE-2017-14741","CVE-2017-14989","CVE-2017-15015","CVE-2017-15016","CVE-2017-15017","CVE-2017-15032","CVE-2017-15033","CVE-2017-15217","CVE-2017-15218","CVE-2017-15277","CVE-2017-15281","CVE-2017-16546","CVE-2017-17499","CVE-2017-17504","CVE-2017-17680","CVE-2017-17681","CVE-2017-17682","CVE-2017-17879","CVE-2017-17881","CVE-2017-17882","CVE-2017-17884","CVE-2017-17885","CVE-2017-17886","CVE-2017-17887","CVE-2017-17914","CVE-2017-17934","CVE-2017-18008","CVE-2017-18022","CVE-2017-18027","CVE-2017-18028","CVE-2017-18029","CVE-2017-18209","CVE-2017-18211","CVE-2017-18251","CVE-2017-18252","CVE-2017-18254","CVE-2017-18271","CVE-2017-18273","CVE-2018-10177","CVE-2018-10804","CVE-2018-10805","CVE-2018-11251","CVE-2018-11625","CVE-2018-11655","CVE-2018-11656","CVE-2018-5246","CVE-2018-5247","CVE-2018-5248","CVE-2018-5357","CVE-2018-5358","CVE-2018-6405","CVE-2018-7443","CVE-2018-8804","CVE-2018-8960","CVE-2018-9133"]}]},{"id":"CVE-2017-0379","published":"2017-08-29T00:00:00","updated_at":"2025-08-25T22:15:51.238576+00:00","description":"\nLibgcrypt before 1.8.1 does not properly consider Curve25519 side-channel\nattacks, which makes it easier for attackers to discover a secret key,\nrelated to cipher/ecc.c and mpi/ec.c.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3417-1","https://www.cve.org/CVERecord?id=CVE-2017-0379"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873383"],"patches":{"libgcrypt20":["upstream: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=da780c8183cccc8f533c8ace8211ac2cb2bdee7b"],"libgcrypt11":[]},"tags":{},"packages":[{"name":"libgcrypt11","source":"https://ubuntu.com/security/cve?package=libgcrypt11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgcrypt11","debian":"https://tracker.debian.org/pkg/libgcrypt11","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libgcrypt20","source":"https://ubuntu.com/security/cve?package=libgcrypt20","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgcrypt20","debian":"https://tracker.debian.org/pkg/libgcrypt20","statuses":[{"release_codename":"upstream","status":"released","description":"1.7.9-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"1.7.6-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3417-1"],"notices":[{"id":"USN-3417-1","title":"Libgcrypt vulnerability","summary":"Libgcrypt could be made to expose sensitive information.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-09-14T16:55:38.073319","description":"Daniel Genkin, Luke Valenta, and Yuval Yarom discovered that Libgcrypt was\nsusceptible to an attack via side channels. A local attacker could use this\nattack to recover Curve25519 private keys.\n","is_hidden":false,"release_packages":{"zesty":[{"name":"libgcrypt20","version":"1.7.6-1ubuntu0.2","description":"LGPL Crypto library","is_source":true},{"name":"libgcrypt20","version":"1.7.6-1ubuntu0.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/libgcrypt20","version_link":"https://launchpad.net/ubuntu/+source/libgcrypt20/1.7.6-1ubuntu0.2"}]},"type":"USN","cves_ids":["CVE-2017-0379"]}]},{"id":"CVE-2017-13716","published":"2017-08-28T21:29:00","updated_at":"2025-07-11T07:38:49.704699+00:00","description":"\nThe C++ symbol demangler routine in cplus-dem.c in libiberty, as\ndistributed in GNU Binutils 2.29, allows remote attackers to cause a denial\nof service (excessive memory allocation and application crash) via a\ncrafted file, as demonstrated by a call from the Binary File Descriptor\n(BFD) library (aka libbfd).","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"This issue is actually a libiberty issue, but there doesn't\nappear to be a libiberty bug open for it as of 2021-07-30"}],"codename":null,"priority":"low","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2017-13716"],"bugs":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"patches":{"binutils":[],"libiberty":[]},"tags":{},"packages":[{"name":"binutils","source":"https://ubuntu.com/security/cve?package=binutils","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=binutils","debian":"https://tracker.debian.org/pkg/binutils","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"trusty","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"","component":null,"pocket":"security"}]},{"name":"libiberty","source":"https://ubuntu.com/security/cve?package=libiberty","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libiberty","debian":"https://tracker.debian.org/pkg/libiberty","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"bionic","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"deferred","description":"2021-02-26","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"noble","status":"deferred","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was deferred","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was deferred [2021-02-26]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"deferred","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-6594","published":"2017-08-28T19:29:00","updated_at":"2025-08-25T22:36:30.683262+00:00","description":"\nThe transit path validation code in Heimdal before 7.3 might allow\nattackers to bypass the capath policy protection mechanism by leveraging\nfailure to add the previous hop realm to the transit path of issued\ntickets.","ubuntu_description":"","notes":[{"author":"ratliff","note":"Upstream: \"[the fix] may break sites that rely on the bug.\""},{"author":"mdeslaur","note":"heimdal-kdc package is in universe"},{"author":"ccdm94","note":"in the commit that fixes this issue, upstream mentions that\nthere might be applications that use this bug as a \"feature\"\nwhen sometimes authenticating in cross-realm configurations,\nmeaning that applying the proposed fix could end up breaking\nsaid applications. In order to avoid regressions for\napplications that use heimdal in xenial and earlier, this\nissue will be marked as ignored for those releases."}],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2017-6594"],"bugs":[""],"patches":{"heimdal":["upstream: https://github.com/heimdal/heimdal/commit/b1e699103f08d6a0ca46a122193c9da65f6cf837"]},"tags":{"heimdal":["universe-binary"]},"packages":[{"name":"heimdal","source":"https://ubuntu.com/security/cve?package=heimdal","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=heimdal","debian":"https://tracker.debian.org/pkg/heimdal","statuses":[{"release_codename":"groovy","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"7.4.0.dfsg.1-2","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.1.0+dfsg-12","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-13712","published":"2017-08-28T19:29:00","updated_at":"2025-08-25T22:24:10.084717+00:00","description":"\nNULL Pointer Dereference in the id3v2AddAudioDuration function in\nlibmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of\nService by triggering a NULL first argument.","ubuntu_description":"\nIt was discovered that LAME incorrectly handled certain audio files. A remote\nattacker could possibly use this issue to cause a denial of service.","notes":[],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2017-13712","https://ubuntu.com/security/notices/USN-4780-1"],"bugs":["https://sourceforge.net/p/lame/bugs/472/"],"patches":{"lame":[]},"tags":{},"packages":[{"name":"lame","source":"https://ubuntu.com/security/cve?package=lame","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lame","debian":"https://tracker.debian.org/pkg/lame","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.99.5+repack1-3ubuntu1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"3.100-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"3.99.5+repack1-9ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"3.100-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-4780-1"],"notices":[{"id":"USN-4780-1","title":"LAME vulnerabilities","summary":"Several security issues were fixed in LAME.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2022-08-29T23:06:31.544456","description":"It was discovered that LAME incorrectly handled certain audio files. A\nremote attacker could possibly use this issue to cause a denial of service. Eight\nvulnerabilities (CVE-2015-9099, CVE-2015-9100, CVE-2015-9101, CVE-2017-15018,\nCVE-2017-11720, CVE-2017-8419, CVE-2017-9412, CVE-2017-15045) only affected Ubuntu 14.04\nESM, two vulnerabilities (CVE-2017-9410 and CVE-2017-9411) only affected Ubuntu\n16.04 ESM, and one vulnerability (CVE-2017-15019) affected both Ubuntu 14.04\nESM and Ubuntu 16.04.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"lame","version":"3.99.5+repack1-3ubuntu1+esm3","description":"MP3 encoding library (frontend)","is_source":true},{"name":"libmp3lame0","version":"3.99.5+repack1-3ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-infra"},{"name":"libmp3lame-dev","version":"3.99.5+repack1-3ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-infra"},{"name":"lame-doc","version":"3.99.5+repack1-3ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-infra"},{"name":"lame","version":"3.99.5+repack1-3ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"lame","version":"3.99.5+repack1-9ubuntu0.1~esm2","description":"MP3 encoding library (frontend)","is_source":true},{"name":"libmp3lame0","version":"3.99.5+repack1-9ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-apps"},{"name":"libmp3lame-dev","version":"3.99.5+repack1-9ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-apps"},{"name":"lame-doc","version":"3.99.5+repack1-9ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-apps"},{"name":"lame","version":"3.99.5+repack1-9ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/lame","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2017-13712","CVE-2015-9099","CVE-2017-9412","CVE-2017-15018","CVE-2017-8419","CVE-2015-9101","CVE-2017-15019","CVE-2017-15045","CVE-2015-9100","CVE-2017-9410","CVE-2017-11720","CVE-2017-9411"]}]},{"id":"CVE-2017-12954","published":"2017-08-28T19:29:00","updated_at":"2025-08-26T11:57:47.073877+00:00","description":"\nThe gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0\nallows remote attackers to cause a denial of service (invalid memory read\nand application crash) via a crafted gig file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://seclists.org/fulldisclosure/2017/Aug/39","https://www.cve.org/CVERecord?id=CVE-2017-12954"],"bugs":[""],"patches":{"libgig":[]},"tags":{},"packages":[{"name":"libgig","source":"https://ubuntu.com/security/cve?package=libgig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgig","debian":"https://tracker.debian.org/pkg/libgig","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.0.0-5","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12953","published":"2017-08-28T19:29:00","updated_at":"2025-08-26T11:57:47.073877+00:00","description":"\nThe gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig\n4.0.0 allows remote attackers to cause a denial of service (invalid memory\nwrite and application crash) via a crafted gig file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://seclists.org/fulldisclosure/2017/Aug/39","https://www.cve.org/CVERecord?id=CVE-2017-12953"],"bugs":[""],"patches":{"libgig":[]},"tags":{},"packages":[{"name":"libgig","source":"https://ubuntu.com/security/cve?package=libgig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgig","debian":"https://tracker.debian.org/pkg/libgig","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.0.0-4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12952","published":"2017-08-28T19:29:00","updated_at":"2025-08-26T11:57:47.073877+00:00","description":"\nThe LoadString function in helper.h in libgig 4.0.0 allows remote attackers\nto cause a denial of service (NULL pointer dereference and application\ncrash) via a crafted gig file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://seclists.org/fulldisclosure/2017/Aug/39","https://www.cve.org/CVERecord?id=CVE-2017-12952"],"bugs":[""],"patches":{"libgig":[]},"tags":{},"packages":[{"name":"libgig","source":"https://ubuntu.com/security/cve?package=libgig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgig","debian":"https://tracker.debian.org/pkg/libgig","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.0.0-4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12951","published":"2017-08-28T19:29:00","updated_at":"2025-08-26T11:57:47.073877+00:00","description":"\nThe gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig\n4.0.0 allows remote attackers to cause a denial of service (stack-based\nbuffer over-read and application crash) via a crafted gig file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://seclists.org/fulldisclosure/2017/Aug/39","https://www.cve.org/CVERecord?id=CVE-2017-12951"],"bugs":[""],"patches":{"libgig":[]},"tags":{},"packages":[{"name":"libgig","source":"https://ubuntu.com/security/cve?package=libgig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgig","debian":"https://tracker.debian.org/pkg/libgig","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.0.0-5","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12950","published":"2017-08-28T19:29:00","updated_at":"2025-08-26T11:57:47.073877+00:00","description":"\nThe gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote\nattackers to cause a denial of service (NULL pointer dereference and\napplication crash) via a crafted gig file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://seclists.org/fulldisclosure/2017/Aug/39","https://www.cve.org/CVERecord?id=CVE-2017-12950"],"bugs":[""],"patches":{"libgig":[]},"tags":{},"packages":[{"name":"libgig","source":"https://ubuntu.com/security/cve?package=libgig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libgig","debian":"https://tracker.debian.org/pkg/libgig","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.0.0-4","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.1.0~repack-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-12876","published":"2017-08-28T19:29:00","updated_at":"2025-08-25T22:22:49.711278+00:00","description":"\nHeap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6\nallows remote attackers to cause a denial of service via a crafted file.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"per upstream bug, doesn't apply to 6.x"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2017-12876"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/663"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/1cc6f0ccc92c20c7cab6c4a7335daf29c91f0d8e"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"artful","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-1554","published":"2017-08-28T19:29:00","updated_at":"2025-07-11T07:38:09.449091+00:00","description":"\nkgb-bot 1.33-2 allows remote attackers to cause a denial of service\n(crash).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2015/02/07","https://www.cve.org/CVERecord?id=CVE-2015-1554"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776424"],"patches":{"kgb-bot":[]},"tags":{},"packages":[{"name":"kgb-bot","source":"https://ubuntu.com/security/cve?package=kgb-bot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kgb-bot","debian":"https://tracker.debian.org/pkg/kgb-bot","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-0233","published":"2017-08-28T19:29:00","updated_at":"2026-05-22T18:27:24.080021+00:00","description":"\nMultiple insecure Temporary File vulnerabilities in 389 Administration\nServer before 1.1.38.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":4.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.2,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-0233","https://www.cve.org/CVERecord?id=CVE-2015-0233"],"bugs":[""],"patches":{"389-admin":[]},"tags":{"389-admin":["symlink-restriction","hardlink-restriction"]},"packages":[{"name":"389-admin","source":"https://ubuntu.com/security/cve?package=389-admin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=389-admin","debian":"https://tracker.debian.org/pkg/389-admin","statuses":[{"release_codename":"artful","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.1.38-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"1.1.42-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-7030","published":"2017-08-28T15:29:00","updated_at":"2025-08-25T22:09:27.598018+00:00","description":"\nFreeIPA uses a default password policy that locks an account after 5\nunsuccessful authentication attempts, which allows remote attackers to\ncause a denial of service by locking out the account in which system\nservices run on.","ubuntu_description":"\nIt was discovered that FreeIPA incorrectly handled authentication attempts. An\nattacker could possibly use this issue to cause a denial of service.","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugzilla.redhat.com/show_bug.cgi?id=1370493","https://bugzilla.redhat.com/show_bug.cgi?id=1404910 (regression bug)","https://www.cve.org/CVERecord?id=CVE-2016-7030","https://ubuntu.com/security/notices/USN-4792-1"],"bugs":[""],"patches":{"freeipa":["upstream: https://pagure.io/freeipa/c/08e7af9f0f8acac3dcd8dde1eee53261e5d25f1f?branch=ipa-4-4","upstream: https://pagure.io/freeipa/c/171bc3e6853f905184584e414cefa4f7296c02ea?branch=ipa-4-4","upstream: https://pagure.io/freeipa/c/84f6df6349b5c412467746777e905d9e4f8792ca?branch=ipa-4-4","upstream: https://pagure.io/freeipa/c/f0f48ec14f3ff55852393927533ffd253cb5a04b?branch=ipa-4-4","upstream: https://pagure.io/freeipa/c/e02323c1c3b3c3dadd57d9f1885ec1af046718de?branch=ipa-4-4"]},"tags":{},"packages":[{"name":"freeipa","source":"https://ubuntu.com/security/cve?package=freeipa","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeipa","debian":"https://tracker.debian.org/pkg/freeipa","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.3.4-0ubuntu3.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.4.4-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"4.3.1-0ubuntu1+esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-4792-1"],"notices":[{"id":"USN-4792-1","title":"FreeIPA vulnerabilities","summary":"Several security issues were fixed in FreeIPA.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-03-15T21:13:01.388465","description":"It was discovered that FreeIPA incorrectly handled certificates. An\nattacker could possibly use this issue to cause a denial of service by\nrevoking arbitrary certificates This issue only affected Ubuntu 16.04 ESM.\n(CVE-2016-5404)\n\nIt was discovered that FreeIPA incorrectly handled authentication attempts.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2016-7030)\n\nIt was discovered that FreeIPA incorrectly handled user's permissions. An\nauthenticated attacker could possibly use this issue to modify other user's\nprofiles or other unspecified impact. This issue only affected Ubuntu 16.04\nESM. (CVE-2016-9575)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeipa","version":"3.3.4-0ubuntu3.1+esm1","description":"FreeIPA centralized identity framework","is_source":true},{"name":"freeipa-client","version":"3.3.4-0ubuntu3.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-infra"},{"name":"python-freeipa","version":"3.3.4-0ubuntu3.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"freeipa","version":"4.3.1-0ubuntu1+esm1","description":"FreeIPA centralized identity framework","is_source":true},{"name":"freeipa-tests","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"freeipa-admintools","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"freeipa-server-trust-ad","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"python-ipaclient","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"freeipa-common","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"freeipa-client","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"python-ipalib","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"freeipa-server","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"python-ipaserver","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"freeipa-server-dns","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"},{"name":"python-ipatests","version":"4.3.1-0ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipa","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2016-7030","CVE-2016-5404","CVE-2016-9575"]}]},{"id":"CVE-2015-2046","published":"2017-08-28T15:29:00","updated_at":"2025-08-25T21:35:45.753572+00:00","description":"\nCross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later\nbefore 1.2.20.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.mantisbt.org/bugs/view.php?id=19301","http://www.openwall.com/lists/oss-security/2015/02/09/10","https://www.cve.org/CVERecord?id=CVE-2015-2046"],"bugs":[""],"patches":{"mantis":["upstream: https://github.com/mantisbt/mantisbt/commit/6defeed5"]},"tags":{},"packages":[{"name":"mantis","source":"https://ubuntu.com/security/cve?package=mantis","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mantis","debian":"https://tracker.debian.org/pkg/mantis","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-1430","published":"2017-08-28T15:29:00","updated_at":"2025-08-25T21:34:56.297603+00:00","description":"\nBuffer overflow in xymon 4.3.17-1.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2015/01/30/17","https://www.cve.org/CVERecord?id=CVE-2015-1430"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776007"],"patches":{"xymon":[]},"tags":{},"packages":[{"name":"xymon","source":"https://ubuntu.com/security/cve?package=xymon","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xymon","debian":"https://tracker.debian.org/pkg/xymon","statuses":[{"release_codename":"artful","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"4.3.17-5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-1386","published":"2017-08-28T15:29:00","updated_at":"2025-08-26T11:52:37.922388+00:00","description":"\nDirectory traversal vulnerability in unshield 1.0-1.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2015-1386"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776193"],"patches":{"unshield":[]},"tags":{},"packages":[{"name":"unshield","source":"https://ubuntu.com/security/cve?package=unshield","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=unshield","debian":"https://tracker.debian.org/pkg/unshield","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.4.2-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-1199","published":"2017-08-28T15:29:00","updated_at":"2025-08-25T21:33:42.422079+00:00","description":"\nDirectory traversal vulnerability in ppmd 10.1-5.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2015-1199"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775218"],"patches":{"ppmd":[]},"tags":{},"packages":[{"name":"ppmd","source":"https://ubuntu.com/security/cve?package=ppmd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ppmd","debian":"https://tracker.debian.org/pkg/ppmd","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was needed]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-1198","published":"2017-08-28T15:29:00","updated_at":"2025-08-26T11:52:37.922388+00:00","description":"\nMultiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2015-1198"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774954"],"patches":{"ha":[]},"tags":{},"packages":[{"name":"ha","source":"https://ubuntu.com/security/cve?package=ha","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ha","debian":"https://tracker.debian.org/pkg/ha","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-0928","published":"2017-08-28T15:29:00","updated_at":"2025-08-25T21:33:16.934292+00:00","description":"\nlibhtp 0.5.15 allows remote attackers to cause a denial of service (NULL\npointer dereference).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2015-0928"],"bugs":["https://redmine.openinfosecfoundation.org/issues/1385"],"patches":{"suricata":["upstream: https://github.com/inliniac/suricata/commit/5cd7bb2f140d03506b3280aaa71f612701d1a964","upstream: https://github.com/inliniac/suricata/commit/647985d20d7da4fb1a27c74e3c6767d54826bc8a"]},"tags":{},"packages":[{"name":"suricata","source":"https://ubuntu.com/security/cve?package=suricata","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=suricata","debian":"https://tracker.debian.org/pkg/suricata","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.4.7-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.7","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.0.8-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.0.8-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.0.8-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"2.0.8-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":55700,"limit":20,"total_results":79316}