{"cves":[{"id":"CVE-2016-4984","published":"2017-07-17T13:18:00","updated_at":"2025-08-25T22:04:33.551308+00:00","description":"\n/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak\npermissions for the TLS certificate, which allows local users to obtain the\nTLS certificate by leveraging a race condition between the creation of the\ncertificate, and the chmod to protect it.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"RedHat-specific"}],"codename":null,"priority":"medium","cvss3":4.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2016-4984"],"bugs":[""],"patches":{"openldap":[]},"tags":{},"packages":[{"name":"openldap","source":"https://ubuntu.com/security/cve?package=openldap","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openldap","debian":"https://tracker.debian.org/pkg/openldap","statuses":[{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-0764","published":"2017-07-17T13:18:00","updated_at":"2025-08-25T21:50:59.651924+00:00","description":"\nRace condition in Network Manager before 1.0.12 as packaged in Red Hat\nEnterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat\nEnterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7\nallows local users to obtain sensitive connection information by reading\ntemporary files during ifcfg and keyfile changes.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":6.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=1.0.12","https://www.cve.org/CVERecord?id=CVE-2016-0764"],"bugs":[""],"patches":{"network-manager":["upstream: https://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=60b7ed3bdc3941a3b7c56824fba4b7291e79041f"]},"tags":{},"packages":[{"name":"network-manager","source":"https://ubuntu.com/security/cve?package=network-manager","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=network-manager","debian":"https://tracker.debian.org/pkg/network-manager","statuses":[{"release_codename":"artful","status":"not-affected","description":"1.8.4-1ubuntu3","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.10.4-1ubuntu3","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"1.10.4-1ubuntu3","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"1.10.4-1ubuntu3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.1.91-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"1.2.6-0ubuntu0.16.04.2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2017-9951","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:42:14.223197+00:00","description":"\nThe try_read_command function in memcached.c in memcached before 1.4.39\nallows remote attackers to cause a denial of service (segmentation fault)\nvia a request to add/set a key, which makes a comparison between signed and\nunsigned int and triggers a heap-based buffer over-read. NOTE: this\nvulnerability exists because of an incomplete fix for CVE-2016-8705.","ubuntu_description":"\nDaniel Shapira discovered an integer overflow issue in Memcached. A\nremote attacker could use this to cause a denial of service (daemon\ncrash).","notes":[],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/","https://github.com/memcached/memcached/wiki/ReleaseNotes1439","https://groups.google.com/forum/message/raw?msg=memcached/ubGWrkmrr4E/nrm1SeVJAQAJ","https://ubuntu.com/security/notices/USN-3588-1","https://www.cve.org/CVERecord?id=CVE-2017-9951"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868701"],"patches":{"memcached":["upstream: https://github.com/memcached/memcached/commit/328629445c71e6c17074f6e9e0e3ef585b58f167"]},"tags":{},"packages":[{"name":"memcached","source":"https://ubuntu.com/security/cve?package=memcached","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=memcached","debian":"https://tracker.debian.org/pkg/memcached","statuses":[{"release_codename":"trusty","status":"released","description":"1.4.14-0ubuntu9.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.39","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.4.25-2ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"artful","status":"released","description":"1.4.33-1ubuntu3.2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":["USN-3588-1"],"notices":[{"id":"USN-3588-1","title":"Memcached vulnerabilities","summary":"Several security issues were fixed in Memcached.\n","instructions":"In general, a standard system update will make all the necessary changes.\n\nPlease note that after applying this update, Memcached will no longer\nlisten to UDP by default. If UDP service is desired, please add\n'-U 11211' to /etc/memcached.conf and restart the memcached service.\n","references":[],"published":"2018-03-05T15:02:20.591935","description":"Daniel Shapira discovered an integer overflow issue in Memcached. A remote\nattacker could use this to cause a denial of service (daemon crash).\n(CVE-2017-9951)\n\nIt was discovered that Memcached listened to UDP by default. A remote\nattacker could use this as part of a distributed denial of service attack.\n(CVE-2018-1000115)\n","is_hidden":false,"release_packages":{"artful":[{"name":"memcached","version":"1.4.33-1ubuntu3.2","description":"high-performance memory object caching system","is_source":true},{"name":"memcached","version":"1.4.33-1ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/memcached","version_link":"https://launchpad.net/ubuntu/+source/memcached/1.4.33-1ubuntu3.2"}],"trusty":[{"name":"memcached","version":"1.4.14-0ubuntu9.2","description":"high-performance memory object caching system","is_source":true},{"name":"memcached","version":"1.4.14-0ubuntu9.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/memcached","version_link":"https://launchpad.net/ubuntu/+source/memcached/1.4.14-0ubuntu9.2","pocket":"security"}],"xenial":[{"name":"memcached","version":"1.4.25-2ubuntu1.3","description":"high-performance memory object caching system","is_source":true},{"name":"memcached","version":"1.4.25-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/memcached","version_link":"https://launchpad.net/ubuntu/+source/memcached/1.4.25-2ubuntu1.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-9951","CVE-2018-1000115"]}]},{"id":"CVE-2017-11362","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:36.881393+00:00","description":"\nIn PHP 7.x before 7.0.21 and 7.1.x before 7.1.7,\next/intl/msgformat/msgformat_parse.c does not restrict the locale length,\nwhich allows remote attackers to cause a denial of service (stack-based\nbuffer overflow and application crash) or possibly have unspecified other\nimpact within International Components for Unicode (ICU) for C/C++ via a\nlong first argument to the msgfmt_parse_message function.","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"PHP team disputes this CVE's security relevance"},{"author":"mdeslaur","note":"php5 looks to be affected by the issue also\nreproducer doesn't work on any release"}],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3382-1","https://ubuntu.com/security/notices/USN-3566-2","https://www.cve.org/CVERecord?id=CVE-2017-11362"],"bugs":["https://bugs.php.net/bug.php?id=73473"],"patches":{"php5":[],"php7.0":["upstream: http://git.php.net/?p=php-src.git;a=commit;h=95c4564f939c916538579ef63602a3cd31941c51"],"php7.1":["upstream: http://git.php.net/?p=php-src.git;a=commit;h=95c4564f939c916538579ef63602a3cd31941c51"]},"tags":{},"packages":[{"name":"php5","source":"https://ubuntu.com/security/cve?package=php5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=php5","debian":"https://tracker.debian.org/pkg/php5","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"5.5.9+dfsg-1ubuntu4.22","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"php7.0","source":"https://ubuntu.com/security/cve?package=php7.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=php7.0","debian":"https://tracker.debian.org/pkg/php7.0","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.0.21","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"7.0.22-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"7.0.22-0ubuntu0.17.04.1","component":null,"pocket":"security"}]},{"name":"php7.1","source":"https://ubuntu.com/security/cve?package=php7.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=php7.1","debian":"https://tracker.debian.org/pkg/php7.1","statuses":[{"release_codename":"artful","status":"released","description":"7.1.8-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.1.7","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-3382-1","USN-3566-2"],"notices":[{"id":"USN-3382-1","title":"PHP vulnerabilities","summary":"Several security issues were fixed in PHP.\n","instructions":"In Ubuntu 16.04 LTS and Ubuntu 17.04, this update uses a new upstream\nrelease, which includes additional bug fixes.\n\nIn general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-08-10T15:26:31.218663","description":"It was discovered that the PHP opcache created keys for files it cached\nbased on their filepath. A local attacker could possibly use this issue in\na shared hosting environment to obtain sensitive information. This issue\nonly affected Ubuntu 14.04 LTS. (CVE-2015-8994)\n\nIt was discovered that the PHP URL parser incorrectly handled certain URI\ncomponents. A remote attacker could possibly use this issue to bypass\nhostname-specific URL checks. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2016-10397)\n\nIt was discovered that PHP incorrectly handled certain boolean parameters\nwhen unserializing data. A remote attacker could possibly use this issue to\ncause PHP to crash, resulting in a denial of service. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2017-11143)\n\nSebastian Li, Wei Lei, Xie Xiaofei, and Liu Yang discovered that PHP\nincorrectly handled the OpenSSL sealing function. A remote attacker could\npossibly use this issue to cause PHP to crash, resulting in a denial of\nservice. (CVE-2017-11144)\n\nWei Lei and Liu Yang discovered that the PHP date extension incorrectly\nhandled memory. A remote attacker could possibly use this issue to disclose\nsensitive information from the server. (CVE-2017-11145)\n\nIt was discovered that PHP incorrectly handled certain PHAR archives. A\nremote attacker could use this issue to cause PHP to crash or disclose\nsensitive information. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2017-11147)\n\nIt was discovered that PHP incorrectly handled locale length. A remote\nattacker could possibly use this issue to cause PHP to crash, resulting in\na denial of service. (CVE-2017-11362)\n\nWei Lei and Liu Yang discovered that PHP incorrectly handled parsing ini\nfiles. An attacker could possibly use this issue to cause PHP to crash,\nresulting in a denial of service. (CVE-2017-11628)\n\nIt was discovered that PHP mbstring incorrectly handled certain regular\nexpressions. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"php5","version":"5.5.9+dfsg-1ubuntu4.22","description":"HTML-embedded scripting language interpreter","is_source":true},{"name":"libapache2-mod-php5","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"libapache2-mod-php5filter","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"libphp5-embed","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php-pear","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-cgi","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-cli","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-common","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-curl","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-dev","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-enchant","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-fpm","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-gd","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-gmp","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-intl","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-ldap","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-mysql","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-mysqlnd","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-odbc","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-pgsql","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-pspell","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-readline","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-recode","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-snmp","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-sqlite","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-sybase","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-tidy","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-xmlrpc","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"},{"name":"php5-xsl","version":"5.5.9+dfsg-1ubuntu4.22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.22","pocket":"security"}],"xenial":[{"name":"php7.0","version":"7.0.22-0ubuntu0.16.04.1","description":"HTML-embedded scripting language interpreter","is_source":true},{"name":"libapache2-mod-php7.0","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"libphp7.0-embed","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-bcmath","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-bz2","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-cgi","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-cli","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-common","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-curl","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-dba","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-dev","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-enchant","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-fpm","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-gd","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-gmp","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-imap","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-interbase","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-intl","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-json","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-ldap","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-mbstring","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-mcrypt","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-mysql","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-odbc","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-opcache","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-pgsql","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-phpdbg","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-pspell","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-readline","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-recode","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-snmp","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-soap","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-sqlite3","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-sybase","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-tidy","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-xml","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-xmlrpc","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-xsl","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"},{"name":"php7.0-zip","version":"7.0.22-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.16.04.1","pocket":"security"}],"zesty":[{"name":"php7.0","version":"7.0.22-0ubuntu0.17.04.1","description":"HTML-embedded scripting language interpreter","is_source":true},{"name":"libapache2-mod-php7.0","version":"7.0.22-0ubuntu0.17.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.17.04.1"},{"name":"php7.0-cgi","version":"7.0.22-0ubuntu0.17.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.17.04.1"},{"name":"php7.0-cli","version":"7.0.22-0ubuntu0.17.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.17.04.1"},{"name":"php7.0-fpm","version":"7.0.22-0ubuntu0.17.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php7.0","version_link":"https://launchpad.net/ubuntu/+source/php7.0/7.0.22-0ubuntu0.17.04.1"}]},"type":"USN","cves_ids":["CVE-2015-8994","CVE-2016-10397","CVE-2017-11143","CVE-2017-11144","CVE-2017-11145","CVE-2017-11147","CVE-2017-11362","CVE-2017-11628","CVE-2017-9224","CVE-2017-9226","CVE-2017-9227","CVE-2017-9228","CVE-2017-9229"]},{"id":"USN-3566-2","title":"PHP vulnerabilities","summary":"Several security issues were fixed in PHP.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-05-22T11:58:43.823085","description":"USN-3566-1 fixed several vulnerabilities in PHP. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nIt was discovered that PHP incorrectly handled certain files. An attacker\ncould possibly use this issue to access sensitive information.\n(CVE-2018-20783)\n\nIt was discovered that PHP incorrectly handled certain files. An attacker\ncould possibly use this issue to access sensitive information or possibly\ncause a crash, resulting in a denial of service. (CVE-2019-11036)\n\nOriginal advisory details:\n\n It was discovered that PHP incorrectly handled memory when unserializing\n certain data. A remote attacker could use this issue to cause PHP to crash,\n resulting in a denial of service, or possibly execute arbitrary code. This\n issue only affected Ubuntu 12.04 ESM. (CVE-2017-12933)\n\n It was discovered that PHP incorrectly handled locale length. A remote attacker\n could possibly use this issue to cause PHP to crash, resulting in a denial of service.\n This issue only affected Ubuntu 12.04 ESM. (CVE-2017-11362)\n\n It was discovered that PHP incorrectly handled certain stream metadata. A remote\n attacker could possibly use this issue to set arbitrary metadata. This issue only\n affected Ubuntu 12.04 ESM. (CVE-2016-10712)\n","is_hidden":false,"release_packages":{"precise":[{"name":"php5","version":"5.3.10-1ubuntu3.36","description":"HTML-embedded scripting language interpreter","is_source":true},{"name":"php5-recode","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-xmlrpc","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-curl","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-intl","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-snmp","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-mysql","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-odbc","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-xsl","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-gd","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"libapache2-mod-php5","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-tidy","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-dev","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-pgsql","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-enchant","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-gmp","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-fpm","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-cgi","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-sqlite","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-ldap","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-mysqlnd","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-cli","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php-pear","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-sybase","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"libapache2-mod-php5filter","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-pspell","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"},{"name":"php5-common","version":"5.3.10-1ubuntu3.36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.3.10-1ubuntu3.36"}],"trusty":[{"name":"php5","version":"5.5.9+dfsg-1ubuntu4.29+esm2","description":"HTML-embedded scripting language interpreter","is_source":true},{"name":"php5-recode","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-xmlrpc","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-curl","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-intl","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-snmp","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-mysql","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-odbc","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-xsl","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-gd","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"libapache2-mod-php5","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-tidy","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-dev","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-pgsql","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-enchant","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-readline","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-gmp","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-fpm","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-cgi","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-sqlite","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-ldap","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-mysqlnd","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-cli","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php-pear","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-sybase","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"libapache2-mod-php5filter","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-pspell","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"php5-common","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"},{"name":"libphp5-embed","version":"5.5.9+dfsg-1ubuntu4.29+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/php5","version_link":"https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29+esm2"}]},"type":"USN","cves_ids":["CVE-2016-10712","CVE-2017-11362","CVE-2017-12933","CVE-2018-20783","CVE-2019-11036"]}]},{"id":"CVE-2017-11360","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:36.881393+00:00","description":"\nThe ReadRLEImage function in coders\\rle.c in ImageMagick 7.0.6-1 has a\nlarge loop vulnerability via a crafted rle file that triggers a huge\nnumber_pixels value.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"This is 0060-CPU-exhaustion-in-ReadRLEImage.patch"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3363-1","https://www.cve.org/CVERecord?id=CVE-2017-11360"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/518","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867808"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/078e9692a257e7a8aa36ccc750927f9617923061","upstream: https://github.com/ImageMagick/ImageMagick/commit/224bc946b24824a77e8e8c52ee07e9bc65796e30"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"upstream","status":"released","description":"8:6.9.7.4+dfsg-12","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.8","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"8:6.9.7.4+dfsg-3ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.8","component":null,"pocket":"security"}]}],"notices_ids":["USN-3363-1"],"notices":[{"id":"USN-3363-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-24T16:42:44.364124","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.8","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.8","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"}],"zesty":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-3ubuntu1.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10928","CVE-2017-11141","CVE-2017-11170","CVE-2017-11188","CVE-2017-11352","CVE-2017-11360","CVE-2017-11447","CVE-2017-11448","CVE-2017-11449","CVE-2017-11450","CVE-2017-11478","CVE-2017-9261","CVE-2017-9262","CVE-2017-9405","CVE-2017-9407","CVE-2017-9409","CVE-2017-9439","CVE-2017-9440","CVE-2017-9501"]}]},{"id":"CVE-2017-11352","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:36.881393+00:00","description":"\nIn ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash\nbecause of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability\nexists because of an incomplete fix for CVE-2017-9144.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"This is 0055-CVE-2017-9144-fix-incomplete-patch.patch\nas of 2017-07-21, doesn't appear fixed in jessie, contrary to\nchangelog"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3363-1","https://www.cve.org/CVERecord?id=CVE-2017-11352","https://ubuntu.com/security/notices/USN-3681-1"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/502","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868469"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/86cb33143c5b21912187403860a7c26761a3cd23"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"upstream","status":"released","description":"8:6.9.7.4+dfsg-12","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.8","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"8:6.9.7.4+dfsg-3ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.8","component":null,"pocket":"security"}]}],"notices_ids":["USN-3363-1","USN-3681-1"],"notices":[{"id":"USN-3363-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-24T16:42:44.364124","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.8","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.8","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.8","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.8","pocket":"security"}],"zesty":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-3ubuntu1.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-3ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10928","CVE-2017-11141","CVE-2017-11170","CVE-2017-11188","CVE-2017-11352","CVE-2017-11360","CVE-2017-11447","CVE-2017-11448","CVE-2017-11449","CVE-2017-11450","CVE-2017-11478","CVE-2017-9261","CVE-2017-9262","CVE-2017-9405","CVE-2017-9407","CVE-2017-9409","CVE-2017-9439","CVE-2017-9440","CVE-2017-9501"]},{"id":"USN-3681-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-12T11:40:14.599634","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"artful":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu2.2"}],"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.9.7.4+dfsg-16ubuntu6.2","pocket":"security"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.11","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2017-1000445","CVE-2017-1000476","CVE-2017-10995","CVE-2017-11352","CVE-2017-11533","CVE-2017-11535","CVE-2017-11537","CVE-2017-11639","CVE-2017-11640","CVE-2017-12140","CVE-2017-12418","CVE-2017-12429","CVE-2017-12430","CVE-2017-12431","CVE-2017-12432","CVE-2017-12433","CVE-2017-12435","CVE-2017-12563","CVE-2017-12587","CVE-2017-12640","CVE-2017-12643","CVE-2017-12644","CVE-2017-12670","CVE-2017-12674","CVE-2017-12691","CVE-2017-12692","CVE-2017-12693","CVE-2017-12875","CVE-2017-12877","CVE-2017-12983","CVE-2017-13058","CVE-2017-13059","CVE-2017-13060","CVE-2017-13061","CVE-2017-13062","CVE-2017-13131","CVE-2017-13134","CVE-2017-13139","CVE-2017-13142","CVE-2017-13143","CVE-2017-13144","CVE-2017-13145","CVE-2017-13758","CVE-2017-13768","CVE-2017-13769","CVE-2017-14060","CVE-2017-14172","CVE-2017-14173","CVE-2017-14174","CVE-2017-14175","CVE-2017-14224","CVE-2017-14249","CVE-2017-14325","CVE-2017-14326","CVE-2017-14341","CVE-2017-14342","CVE-2017-14343","CVE-2017-14400","CVE-2017-14505","CVE-2017-14531","CVE-2017-14532","CVE-2017-14533","CVE-2017-14607","CVE-2017-14624","CVE-2017-14625","CVE-2017-14626","CVE-2017-14682","CVE-2017-14684","CVE-2017-14739","CVE-2017-14741","CVE-2017-14989","CVE-2017-15015","CVE-2017-15016","CVE-2017-15017","CVE-2017-15032","CVE-2017-15033","CVE-2017-15217","CVE-2017-15218","CVE-2017-15277","CVE-2017-15281","CVE-2017-16546","CVE-2017-17499","CVE-2017-17504","CVE-2017-17680","CVE-2017-17681","CVE-2017-17682","CVE-2017-17879","CVE-2017-17881","CVE-2017-17882","CVE-2017-17884","CVE-2017-17885","CVE-2017-17886","CVE-2017-17887","CVE-2017-17914","CVE-2017-17934","CVE-2017-18008","CVE-2017-18022","CVE-2017-18027","CVE-2017-18028","CVE-2017-18029","CVE-2017-18209","CVE-2017-18211","CVE-2017-18251","CVE-2017-18252","CVE-2017-18254","CVE-2017-18271","CVE-2017-18273","CVE-2018-10177","CVE-2018-10804","CVE-2018-10805","CVE-2018-11251","CVE-2018-11625","CVE-2018-11655","CVE-2018-11656","CVE-2018-5246","CVE-2018-5247","CVE-2018-5248","CVE-2018-5357","CVE-2018-5358","CVE-2018-6405","CVE-2018-7443","CVE-2018-8804","CVE-2018-8960","CVE-2018-9133"]}]},{"id":"CVE-2017-11335","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:31.905742+00:00","description":"\nThere is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8\nvia a PlanarConfig=Contig image, which causes a more than one hundred bytes\nout-of-bounds write (related to the ZIPDecode function in tif_zip.c). A\ncrafted input may lead to a remote denial of service attack or an arbitrary\ncode execution attack.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"this will not be fixed in precise/esm"}],"codename":null,"priority":"low","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-3602-1","https://www.cve.org/CVERecord?id=CVE-2017-11335"],"bugs":["http://bugzilla.maptools.org/show_bug.cgi?id=2715","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868513"],"patches":{"tiff":["upstream: https://github.com/vadz/libtiff/commit/69bfeec247899776b1b396651adb47436e5f1556"]},"tags":{},"packages":[{"name":"tiff","source":"https://ubuntu.com/security/cve?package=tiff","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tiff","debian":"https://tracker.debian.org/pkg/tiff","statuses":[{"release_codename":"artful","status":"not-affected","description":"4.0.8-4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"4.0.3-7ubuntu0.8","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.0.8-4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"4.0.6-1ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":["USN-3602-1"],"notices":[{"id":"USN-3602-1","title":"LibTIFF vulnerabilities","summary":"LibTIFF could be made to crash or run programs as your login if it opened a\nspecially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-03-20T17:20:33.729345","description":"It was discovered that LibTIFF incorrectly handled certain malformed\nimages. If a user or automated system were tricked into opening a specially\ncrafted image, a remote attacker could crash the application, leading to a\ndenial of service, or possibly execute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"tiff","version":"4.0.3-7ubuntu0.8","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-doc","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiff-opengl","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiff-tools","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiff4-dev","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiff5","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiff5-alt-dev","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiff5-dev","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"},{"name":"libtiffxx5","version":"4.0.3-7ubuntu0.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.3-7ubuntu0.8","pocket":"security"}],"xenial":[{"name":"tiff","version":"4.0.6-1ubuntu0.3","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-doc","version":"4.0.6-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.3","pocket":"security"},{"name":"libtiff-opengl","version":"4.0.6-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.3","pocket":"security"},{"name":"libtiff-tools","version":"4.0.6-1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.3","pocket":"security"},{"name":"libtiff5","version":"4.0.6-1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.3","pocket":"security"},{"name":"libtiff5-dev","version":"4.0.6-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.3","pocket":"security"},{"name":"libtiffxx5","version":"4.0.6-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2016-10266","CVE-2016-10267","CVE-2016-10268","CVE-2016-10269","CVE-2016-10371","CVE-2017-10688","CVE-2017-11335","CVE-2017-12944","CVE-2017-13726","CVE-2017-13727","CVE-2017-18013","CVE-2017-7592","CVE-2017-7593","CVE-2017-7594","CVE-2017-7595","CVE-2017-7596","CVE-2017-7597","CVE-2017-7598","CVE-2017-7599","CVE-2017-7600","CVE-2017-7601","CVE-2017-7602","CVE-2017-9403","CVE-2017-9404","CVE-2017-9815","CVE-2017-9936","CVE-2018-5784"]}]},{"id":"CVE-2017-10987","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:10.569637+00:00","description":"\nAn FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Buffer\nover-read in fr_dhcp_decode_suboptions()\" and a denial of service.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"v3 only"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-304","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10987"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868765"],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/19a18bf7c8af649c9e9742fb6a046f6aff639866"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"upstream","status":"released","description":"3.0.15+dfsg-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"v3 only","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"v3 only","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"3.0.12+dfsg-4ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [v3 only]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10986","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Infinite\nread in dhcp_attr2vp()\" and a denial of service.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"v3 only"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-303","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10986"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868765"],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/21e2e95751bfb54c0fb0328392d06671a75c191c"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"upstream","status":"released","description":"3.0.15+dfsg-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"v3 only","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"v3 only","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"3.0.12+dfsg-4ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [v3 only]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10985","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows \"Infinite loop\nand memory exhaustion with 'concat' attributes\" and a denial of service.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"v3 only"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-302","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10985"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868765"],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/6726c16549b131ed39f6f8886cdf5d9d922a9a97"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"upstream","status":"released","description":"3.0.15+dfsg-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"only 3.x","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"3.0.12+dfsg-4ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [only 3.x]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10984","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows \"Write overflow\nin data2vp_wimax()\" - this allows remote attackers to cause a denial of\nservice (daemon crash) or possibly execute arbitrary code.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"only 3.x"}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-301","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10984"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868765"],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/931850e5d2f65193520c2d9c9878148c0cdc16a6","upstream: https://github.com/FreeRADIUS/freeradius-server/commit/4b059296e14b6ab75dc17163077490528a819806"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"upstream","status":"released","description":"3.0.15+dfsg-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"only 3.x","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"3.0.12+dfsg-4ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [only 3.x]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10983","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15\nallows \"DHCP - Read overflow when decoding option 63\" and a denial of\nservice.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-206","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10983"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868765"],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/ec08b30f87066f82073d02fab57e8ffeef81373d","upstream: https://github.com/FreeRADIUS/freeradius-server/commit/5759b20af99af6d30924f0efd8da5eac2a17163d"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"upstream","status":"released","description":"3.0.15+dfsg-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.8+dfsg-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"3.0.12+dfsg-4ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.1.12+dfsg-1.2ubuntu8.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10982","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Buffer\nover-read in fr_dhcp_decode_options()\" and a denial of service.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"affects v2.x only"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-205","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10982"],"bugs":[""],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/10b6de9345c9e0d9d4d5e0426fa5c3d68d702875"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"trusty","status":"released","description":"2.1.12+dfsg-1.2ubuntu8.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.12+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.8+dfsg-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"v2.x only","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10981","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Memory\nleak in fr_dhcp_decode()\" and a denial of service.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"affects v2.x only"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-204","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10981"],"bugs":[""],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c574e51393b014feaffe6c"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"trusty","status":"released","description":"2.1.12+dfsg-1.2ubuntu8.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.12+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.8+dfsg-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"v2.x only","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10980","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Memory\nleak in decode_tlv()\" and a denial of service.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"affects 2.x only"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-203","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10980"],"bugs":[""],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637b5c4e4a6fa1326f0a029"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"trusty","status":"released","description":"2.1.12+dfsg-1.2ubuntu8.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.12+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.8+dfsg-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"2.x only","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10979","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows \"Write overflow\nin rad_coalesce()\" - this allows remote attackers to cause a denial of\nservice (daemon crash) or possibly execute arbitrary code.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"affects 2.x only"}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-202","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10979"],"bugs":[""],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/ae3ba0011e7d299e92c45300e0137a56a650e8f5"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"trusty","status":"released","description":"2.1.12+dfsg-1.2ubuntu8.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.12+dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.8+dfsg-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"2.x only","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-10978","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:20:05.536232+00:00","description":"\nAn FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15\nallows \"Read / write overflow in make_secret()\" and a denial of service.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://freeradius.org/security/fuzzer-2017.html#FR-GV-201","http://freeradius.org/security/fuzzer-2017.html","https://ubuntu.com/security/notices/USN-3369-1","https://www.cve.org/CVERecord?id=CVE-2017-10978"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868765"],"patches":{"freeradius":["upstream: https://github.com/FreeRADIUS/freeradius-server/commit/38ee90f2a5a28dc5887a30bdfdc98109c0418e68","upstream: https://github.com/FreeRADIUS/freeradius-server/commit/fc8662d7e827f630d515eaa0bddfa94754c8047f"]},"tags":{},"packages":[{"name":"freeradius","source":"https://ubuntu.com/security/cve?package=freeradius","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeradius","debian":"https://tracker.debian.org/pkg/freeradius","statuses":[{"release_codename":"upstream","status":"released","description":"3.0.15","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.1.12+dfsg-1.2ubuntu8.2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.2.8+dfsg-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"3.0.12+dfsg-4ubuntu1.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-3369-1"],"notices":[{"id":"USN-3369-1","title":"FreeRADIUS vulnerabilities","summary":"Several security issues were fixed in FreeRADIUS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-07-27T16:34:51.900512","description":"Guido Vranken discovered that FreeRADIUS incorrectly handled memory when\ndecoding packets. A remote attacker could use this issue to cause\nFreeRADIUS to crash or hang, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-common","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-dialupadmin","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-iodbc","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-krb5","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-ldap","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-mysql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-postgresql","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"freeradius-utils","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius-dev","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"},{"name":"libfreeradius2","version":"2.1.12+dfsg-1.2ubuntu8.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2","pocket":"security"}],"xenial":[{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-common","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-iodbc","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-krb5","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-ldap","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-mysql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-postgresql","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"freeradius-utils","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius-dev","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"},{"name":"libfreeradius2","version":"2.2.8+dfsg-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1","pocket":"security"}],"zesty":[{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","description":"high-performance and highly configurable RADIUS server","is_source":true},{"name":"freeradius","version":"3.0.12+dfsg-4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeradius","version_link":"https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2"}]},"type":"USN","cves_ids":["CVE-2017-10978","CVE-2017-10979","CVE-2017-10980","CVE-2017-10981","CVE-2017-10982","CVE-2017-10983","CVE-2017-10984","CVE-2017-10985","CVE-2017-10986","CVE-2017-10987"]}]},{"id":"CVE-2017-1000050","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:18:14.346844+00:00","description":"\nJasPer 2.0.12 is vulnerable to a NULL pointer exception in the function\njp2_encode which failed to check to see if the image contained at least one\ncomponent resulting in a denial-of-service.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2017/03/06/1","https://ubuntu.com/security/notices/USN-3693-1","https://www.cve.org/CVERecord?id=CVE-2017-1000050"],"bugs":["https://github.com/mdadams/jasper/issues/120"],"patches":{"jasper":["upstream: https://github.com/mdadams/jasper/commit/58ba0365d911b9f9dd68e9abf826682c0b4f2293"]},"tags":{},"packages":[{"name":"jasper","source":"https://ubuntu.com/security/cve?package=jasper","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jasper","debian":"https://tracker.debian.org/pkg/jasper","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.900.1-14ubuntu3.5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.900.1-debian1-2.4ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-3693-1"],"notices":[{"id":"USN-3693-1","title":"JasPer vulnerabilities","summary":"Several security issues were fixed in JasPer.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2018-06-27T17:20:01.117220","description":"It was discovered that JasPer incorrectly handled certain malformed\nJPEG-2000 image files. If a user or automated system using JasPer were\ntricked into opening a specially crafted image, an attacker could exploit\nthis to cause a denial of service or possibly execute code with the\nprivileges of the user invoking the program.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"jasper","version":"1.900.1-14ubuntu3.5","description":"Library for manipulating JPEG-2000 files","is_source":true},{"name":"libjasper-dev","version":"1.900.1-14ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/jasper","version_link":"https://launchpad.net/ubuntu/+source/jasper/1.900.1-14ubuntu3.5","pocket":"security"},{"name":"libjasper-runtime","version":"1.900.1-14ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/jasper","version_link":"https://launchpad.net/ubuntu/+source/jasper/1.900.1-14ubuntu3.5","pocket":"security"},{"name":"libjasper1","version":"1.900.1-14ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/jasper","version_link":"https://launchpad.net/ubuntu/+source/jasper/1.900.1-14ubuntu3.5","pocket":"security"}],"xenial":[{"name":"jasper","version":"1.900.1-debian1-2.4ubuntu1.2","description":"Library for manipulating JPEG-2000 files","is_source":true},{"name":"libjasper-dev","version":"1.900.1-debian1-2.4ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/jasper","version_link":"https://launchpad.net/ubuntu/+source/jasper/1.900.1-debian1-2.4ubuntu1.2","pocket":"security"},{"name":"libjasper-runtime","version":"1.900.1-debian1-2.4ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/jasper","version_link":"https://launchpad.net/ubuntu/+source/jasper/1.900.1-debian1-2.4ubuntu1.2","pocket":"security"},{"name":"libjasper1","version":"1.900.1-debian1-2.4ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/jasper","version_link":"https://launchpad.net/ubuntu/+source/jasper/1.900.1-debian1-2.4ubuntu1.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2015-5203","CVE-2015-5221","CVE-2016-10248","CVE-2016-10250","CVE-2016-8883","CVE-2016-8887","CVE-2016-9262","CVE-2016-9387","CVE-2016-9388","CVE-2016-9389","CVE-2016-9390","CVE-2016-9391","CVE-2016-9392","CVE-2016-9393","CVE-2016-9394","CVE-2016-9396","CVE-2016-9600","CVE-2017-1000050","CVE-2017-6850"]}]},{"id":"CVE-2017-1000024","published":"2017-07-17T00:00:00","updated_at":"2025-08-25T22:18:09.160520+00:00","description":"\nShotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to\nan information disclosure in the web publishing plugins resulting in\npotential password and oauth token plaintext transmission","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://mail.gnome.org/archives/shotwell-list/2017-January/msg00048.html","https://ubuntu.com/security/notices/USN-3379-1","https://www.cve.org/CVERecord?id=CVE-2017-1000024"],"bugs":[""],"patches":{"shotwell":["upstream: https://git.gnome.org/browse/shotwell/commit/?h=shotwell-0.24&id=bc26ea644264c85b9355f265b2e0afefe4943986"]},"tags":{},"packages":[{"name":"shotwell","source":"https://ubuntu.com/security/cve?package=shotwell","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=shotwell","debian":"https://tracker.debian.org/pkg/shotwell","statuses":[{"release_codename":"zesty","status":"released","description":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.18.0-0ubuntu4.5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.24.5, 0.25.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"}]}],"notices_ids":["USN-3379-1"],"notices":[{"id":"USN-3379-1","title":"Shotwell vulnerability","summary":"Shotwell could be made to expose sensitive information over the\nnetwork.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2017-08-07T15:01:54.018517","description":"It was discovered that Shotwell is vulnerable to an information disclosure\nin the web publishing plugins resulting in potential password and oauth token\nplaintext transmission.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"shotwell","version":"0.18.0-0ubuntu4.5","description":"digital photo organizer","is_source":true},{"name":"shotwell","version":"0.18.0-0ubuntu4.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/shotwell","version_link":"https://launchpad.net/ubuntu/+source/shotwell/0.18.0-0ubuntu4.5","pocket":"security"},{"name":"shotwell-common","version":"0.18.0-0ubuntu4.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/shotwell","version_link":"https://launchpad.net/ubuntu/+source/shotwell/0.18.0-0ubuntu4.5","pocket":"security"}],"xenial":[{"name":"shotwell","version":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1","description":"digital photo organizer","is_source":true},{"name":"shotwell","version":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/shotwell","version_link":"https://launchpad.net/ubuntu/+source/shotwell/0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1","pocket":"security"},{"name":"shotwell-common","version":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/shotwell","version_link":"https://launchpad.net/ubuntu/+source/shotwell/0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1","pocket":"security"}],"zesty":[{"name":"shotwell","version":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu3.1","description":"digital photo organizer","is_source":true},{"name":"shotwell","version":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/shotwell","version_link":"https://launchpad.net/ubuntu/+source/shotwell/0.22.0+git20160108.r1.f2fb1f7-0ubuntu3.1"},{"name":"shotwell-common","version":"0.22.0+git20160108.r1.f2fb1f7-0ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/shotwell","version_link":"https://launchpad.net/ubuntu/+source/shotwell/0.22.0+git20160108.r1.f2fb1f7-0ubuntu3.1"}]},"type":"USN","cves_ids":["CVE-2017-1000024"]}]},{"id":"CVE-2017-11310","published":"2017-07-13T18:29:00","updated_at":"2025-08-25T22:20:31.905742+00:00","description":"\nThe read_user_chunk_callback function in coders\\png.c in ImageMagick\n7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted\nPNG files.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"possibly not in a released version"},{"author":"mdeslaur","note":"confirmed, only affects ImageMagick-7"}],"codename":null,"priority":"low","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2017-11310"],"bugs":["https://github.com/ImageMagick/ImageMagick/issues/517"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":56340,"limit":20,"total_results":79316}