{"cves":[{"id":"CVE-2016-0785","published":"2016-04-12T16:59:00","updated_at":"2025-08-25T21:51:05.849887+00:00","description":"\nApache Struts 2.x before 2.3.28 allows remote attackers to execute\narbitrary code via a \"%{}\" sequence in a tag attribute, aka forced double\nOGNL evaluation.","ubuntu_description":"","notes":[{"author":"ebarretto","note":"Only 2.0.0 to 2.3.28.1"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.securitytracker.com/id/1035271","http://struts.apache.org/docs/s2-029.html","https://www.cve.org/CVERecord?id=CVE-2016-0785"],"bugs":[""],"patches":{"libstruts1.2-java":[]},"tags":{},"packages":[{"name":"libstruts1.2-java","source":"https://ubuntu.com/security/cve?package=libstruts1.2-java","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libstruts1.2-java","debian":"https://tracker.debian.org/pkg/libstruts1.2-java","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [code not present]]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3171","published":"2016-04-12T15:59:00","updated_at":"2025-07-17T16:42:42.584291+00:00","description":"\nDrupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before\n5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute\narbitrary code via vectors related to session data truncation.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3171"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3170","published":"2016-04-12T15:59:00","updated_at":"2025-08-26T11:54:20.464025+00:00","description":"\nThe \"have you forgotten your password\" links in the User module in Drupal\n7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain\nsensitive username information by leveraging a configuration that permits\nusing an email address to login and a module that permits logging in.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3170"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3169","published":"2016-04-12T15:59:00","updated_at":"2025-08-26T11:54:05.517589+00:00","description":"\nThe User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote\nattackers to gain privileges by leveraging contributed or custom code that\ncalls the user_save function with an explicit category and loads all roles\ninto the array.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3169"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3168","published":"2016-04-12T15:59:00","updated_at":"2025-08-26T11:54:05.517589+00:00","description":"\nThe System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow\nremote attackers to hijack the authentication of site administrators for\nrequests that download and run files with arbitrary JSON-encoded content,\naka a \"reflected file download vulnerability.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3168"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3167","published":"2016-04-12T15:59:00","updated_at":"2025-07-17T16:42:42.584291+00:00","description":"\nOpen redirect vulnerability in the drupal_goto function in Drupal 6.x\nbefore 6.38, when used with PHP before 5.4.7, allows remote attackers to\nredirect users to arbitrary web sites and conduct phishing attacks via a\ndouble-encoded URL in the \"destination\" parameter.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3167"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3166","published":"2016-04-12T15:59:00","updated_at":"2025-07-17T16:42:42.584291+00:00","description":"\nCRLF injection vulnerability in the drupal_set_header function in Drupal\n6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers\nto inject arbitrary HTTP headers and conduct HTTP response splitting\nattacks by leveraging a module that allows user-submitted data to appear in\nHTTP headers.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3166"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"precise","status":"not-affected","description":"requires php older than 5.1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3165","published":"2016-04-12T15:59:00","updated_at":"2025-07-17T16:42:42.584291+00:00","description":"\nThe Form API in Drupal 6.x before 6.38 ignores access restrictions on\nsubmit buttons, which might allow remote attackers to bypass intended\naccess restrictions by leveraging permission to submit a form with a button\nthat has \"#access\" set to FALSE in the server-side form definition.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3165"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3164","published":"2016-04-12T15:59:00","updated_at":"2025-08-26T11:54:05.517589+00:00","description":"\nDrupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow\nremote attackers to conduct open redirect attacks by leveraging (1) custom\ncode or (2) a form shown on a 404 error page, related to path manipulation.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3164"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3163","published":"2016-04-12T15:59:00","updated_at":"2025-08-26T11:54:05.517589+00:00","description":"\nThe XML-RPC system in Drupal 6.x before 6.38 and 7.x before 7.43 might make\nit easier for remote attackers to conduct brute-force attacks via a large\nnumber of calls made at once to the same method.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3163"],"bugs":[""],"patches":{"drupal7":[],"drupal6":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.38","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-3162","published":"2016-04-12T15:59:00","updated_at":"2025-08-26T11:54:05.517589+00:00","description":"\nThe File module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allows\nremote authenticated users to bypass access restrictions and read, delete,\nor substitute a link to a file uploaded to an unprocessed form by\nleveraging permission to create content or comment and upload files.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.drupal.org/SA-CORE-2016-001","http://www.openwall.com/lists/oss-security/2016/02/24/19","https://www.cve.org/CVERecord?id=CVE-2016-3162"],"bugs":[""],"patches":{"drupal6":[],"drupal7":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.43-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-2558","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:58:25.367750+00:00","description":"\nThe Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU\ngraphics driver R340 before 341.95 and R352 before 354.74 on Windows allows\nlocal users to obtain sensitive information, cause a denial of service\n(crash), or gain privileges via unspecified vectors related to an untrusted\npointer, which trigger uninitialized or out-of-bounds memory access.","ubuntu_description":"","notes":[{"author":"tyhicks","note":"Only affects Windows"}],"codename":null,"priority":"medium","cvss3":8.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://support.lenovo.com/us/en/product_security/len_5551","http://nvidia.custhelp.com/app/answers/detail/a_id/4061","https://www.cve.org/CVERecord?id=CVE-2016-2558"],"bugs":[""],"patches":{"nvidia-graphics-drivers":[],"nvidia-graphics-drivers-173":[],"nvidia-graphics-drivers-173-updates":[],"nvidia-graphics-drivers-304":[],"nvidia-graphics-drivers-304-updates":[],"nvidia-graphics-drivers-310-updates":[],"nvidia-graphics-drivers-319":[],"nvidia-graphics-drivers-319-updates":[],"nvidia-graphics-drivers-331":[],"nvidia-graphics-drivers-331-updates":[],"nvidia-graphics-drivers-340":[],"nvidia-graphics-drivers-340-updates":[],"nvidia-graphics-drivers-346":[],"nvidia-graphics-drivers-346-updates":[],"nvidia-graphics-drivers-352":[],"nvidia-graphics-drivers-352-updates":[],"nvidia-graphics-drivers-361":[],"nvidia-graphics-drivers-361-updates":[],"nvidia-graphics-drivers-96":[],"nvidia-graphics-drivers-96-updates":[],"nvidia-graphics-drivers-experimental-304":[],"nvidia-graphics-drivers-experimental-310":[],"nvidia-graphics-drivers-tegra":[],"nvidia-graphics-drivers-updates":[]},"tags":{},"packages":[{"name":"nvidia-graphics-drivers","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-173","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-173","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-173","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-173","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-173-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-173-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-173-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-173-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-310-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-310-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-310-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-310-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-319","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-319","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-319","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-319","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-319-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-319-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-319-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-319-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-340","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-340","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-340","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-340","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-340-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-340-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-340-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-340-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-346","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-346","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-346","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-346","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-346-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-346-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-346-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-346-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-352","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-352","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-352","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-352","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-352-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-352-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-352-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-352-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-361","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-361","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-361","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-361","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-361-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-361-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-361-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-361-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-96","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-96","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-96","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-96","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-96-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-96-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-96-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-96-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-experimental-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-experimental-304","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-experimental-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-experimental-304","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-experimental-310","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-experimental-310","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-experimental-310","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-experimental-310","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-tegra","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-tegra","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-tegra","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-tegra","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-2557","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:58:25.367750+00:00","description":"\nThe Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU\ngraphics driver R340 before 341.95 and R352 before 354.74 on Windows allows\nlocal users to obtain sensitive information from kernel memory, cause a\ndenial of service (crash), or possibly gain privileges via unspecified\nvectors, which trigger uninitialized or out-of-bounds memory access.","ubuntu_description":"","notes":[{"author":"tyhicks","note":"Only affects Windows"}],"codename":null,"priority":"medium","cvss3":8.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://support.lenovo.com/us/en/product_security/len_5551","http://nvidia.custhelp.com/app/answers/detail/a_id/4060","https://www.cve.org/CVERecord?id=CVE-2016-2557"],"bugs":[""],"patches":{"nvidia-graphics-drivers":[],"nvidia-graphics-drivers-173":[],"nvidia-graphics-drivers-173-updates":[],"nvidia-graphics-drivers-304":[],"nvidia-graphics-drivers-304-updates":[],"nvidia-graphics-drivers-310-updates":[],"nvidia-graphics-drivers-319":[],"nvidia-graphics-drivers-319-updates":[],"nvidia-graphics-drivers-331":[],"nvidia-graphics-drivers-331-updates":[],"nvidia-graphics-drivers-340":[],"nvidia-graphics-drivers-340-updates":[],"nvidia-graphics-drivers-346":[],"nvidia-graphics-drivers-346-updates":[],"nvidia-graphics-drivers-352":[],"nvidia-graphics-drivers-352-updates":[],"nvidia-graphics-drivers-361":[],"nvidia-graphics-drivers-361-updates":[],"nvidia-graphics-drivers-96":[],"nvidia-graphics-drivers-96-updates":[],"nvidia-graphics-drivers-experimental-304":[],"nvidia-graphics-drivers-experimental-310":[],"nvidia-graphics-drivers-tegra":[],"nvidia-graphics-drivers-updates":[]},"tags":{},"packages":[{"name":"nvidia-graphics-drivers","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers","statuses":[{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-173","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-173","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-173","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-173","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-173-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-173-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-173-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-173-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-310-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-310-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-310-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-310-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-319","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-319","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-319","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-319","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-319-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-319-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-319-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-319-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-340","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-340","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-340","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-340","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-340-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-340-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-340-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-340-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-346","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-346","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-346","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-346","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-346-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-346-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-346-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-346-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-352","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-352","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-352","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-352","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-352-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-352-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-352-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-352-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-361","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-361","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-361","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-361","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-361-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-361-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-361-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-361-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-96","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-96","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-96","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-96","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-96-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-96-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-96-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-96-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-experimental-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-experimental-304","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-experimental-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-experimental-304","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-experimental-310","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-experimental-310","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-experimental-310","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-experimental-310","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-tegra","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-tegra","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-tegra","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-tegra","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-2556","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:58:25.367750+00:00","description":"\nThe Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU\ngraphics driver R340 before 341.95 and R352 before 354.74 on Windows\nimproperly allows access to restricted functionality, which allows local\nusers to gain privileges via unspecified vectors.","ubuntu_description":"","notes":[{"author":"tyhicks","note":"Only affects Windows"}],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://support.lenovo.com/us/en/product_security/len_5551","http://nvidia.custhelp.com/app/answers/detail/a_id/4059","https://www.cve.org/CVERecord?id=CVE-2016-2556"],"bugs":[""],"patches":{"nvidia-graphics-drivers":[],"nvidia-graphics-drivers-173":[],"nvidia-graphics-drivers-173-updates":[],"nvidia-graphics-drivers-304":[],"nvidia-graphics-drivers-304-updates":[],"nvidia-graphics-drivers-310-updates":[],"nvidia-graphics-drivers-319":[],"nvidia-graphics-drivers-319-updates":[],"nvidia-graphics-drivers-331":[],"nvidia-graphics-drivers-331-updates":[],"nvidia-graphics-drivers-340":[],"nvidia-graphics-drivers-340-updates":[],"nvidia-graphics-drivers-346":[],"nvidia-graphics-drivers-346-updates":[],"nvidia-graphics-drivers-352":[],"nvidia-graphics-drivers-352-updates":[],"nvidia-graphics-drivers-361":[],"nvidia-graphics-drivers-361-updates":[],"nvidia-graphics-drivers-96":[],"nvidia-graphics-drivers-96-updates":[],"nvidia-graphics-drivers-experimental-304":[],"nvidia-graphics-drivers-experimental-310":[],"nvidia-graphics-drivers-tegra":[],"nvidia-graphics-drivers-updates":[]},"tags":{},"packages":[{"name":"nvidia-graphics-drivers","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-173","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-173","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-173","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-173","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-173-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-173-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-173-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-173-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-310-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-310-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-310-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-310-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-319","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-319","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-319","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-319","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-319-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-319-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-319-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-319-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-340","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-340","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-340","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-340","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-340-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-340-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-340-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-340-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-346","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-346","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-346","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-346","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-346-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-346-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-346-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-346-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [superseded]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-352","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-352","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-352","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-352","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-352-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-352-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-352-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-352-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [Windows only]]","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-361","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-361","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-361","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-361","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-361-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-361-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-361-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-361-updates","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-96","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-96","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-96","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-96","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-96-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-96-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-96-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-96-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-experimental-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-experimental-304","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-experimental-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-experimental-304","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-experimental-310","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-experimental-310","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-experimental-310","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-experimental-310","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-tegra","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-tegra","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-tegra","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-tegra","statuses":[{"release_codename":"precise","status":"not-affected","description":"Windows only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-updates","statuses":[{"release_codename":"precise","status":"not-affected","description":"superseded","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-2166","published":"2016-04-12T14:59:00","updated_at":"2025-08-26T11:54:05.517589+00:00","description":"\nThe (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3)\nproton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1\nimproperly use an unencrypted connection for an amqps URI scheme when SSL\nsupport is unavailable, which might allow man-in-the-middle attackers to\nobtain sensitive information or modify data via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://issues.apache.org/jira/browse/PROTON-1157","http://qpid.apache.org/releases/qpid-proton-0.12.1/","https://www.cve.org/CVERecord?id=CVE-2016-2166"],"bugs":[""],"patches":{"qpid-proton":[]},"tags":{},"packages":[{"name":"qpid-proton","source":"https://ubuntu.com/security/cve?package=qpid-proton","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qpid-proton","debian":"https://tracker.debian.org/pkg/qpid-proton","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.12.1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1866","published":"2016-04-12T14:59:00","updated_at":"2025-08-26T11:53:50.029867+00:00","description":"\nSalt 2015.8.x before 2015.8.4 does not properly handle clear messages on\nthe minion, which allows man-in-the-middle attackers to execute arbitrary\ncode by inserting packets into the minion-master data stream.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://docs.saltstack.com/en/latest/topics/releases/2015.8.5.html","https://www.cve.org/CVERecord?id=CVE-2016-1866"],"bugs":[""],"patches":{"salt":[]},"tags":{},"packages":[{"name":"salt","source":"https://ubuntu.com/security/cve?package=salt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=salt","debian":"https://tracker.debian.org/pkg/salt","statuses":[{"release_codename":"artful","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2015.8.5+ds-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2015.8.8+ds-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2016.3.1+ds-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-8702","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:48:43.108828+00:00","description":"\nThe DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows\nremote DNS servers to cause a denial of service (netsplit) via an invalid\ncharacter in a PTR response, as demonstrated by a \"\\032\" (whitespace)\ncharacter in a hostname.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/inspircd/inspircd/commit/6058483d9fbc1b904d5ae7cfea47bfcde5c5b559","http://www.inspircd.org/2015/04/16/v2019-released.html","https://www.cve.org/CVERecord?id=CVE-2015-8702"],"bugs":[""],"patches":{"inspircd":[]},"tags":{},"packages":[{"name":"inspircd","source":"https://ubuntu.com/security/cve?package=inspircd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=inspircd","debian":"https://tracker.debian.org/pkg/inspircd","statuses":[{"release_codename":"precise","status":"released","description":"1.1.22+dfsg-4+squeeze3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.0.5-1+deb7u2build0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.20-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.0.20-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-8537","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:48:05.362609+00:00","description":"\napp/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before\n3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive\ninformation by viewing an Atom feed.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.redmine.org/projects/redmine/wiki/Security_Advisories","https://www.redmine.org/issues/21419","https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56","http://www.openwall.com/lists/oss-security/2015/12/08/8","https://www.cve.org/CVERecord?id=CVE-2015-8537"],"bugs":[""],"patches":{"redmine":["upstream: https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56"]},"tags":{},"packages":[{"name":"redmine","source":"https://ubuntu.com/security/cve?package=redmine","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=redmine","debian":"https://tracker.debian.org/pkg/redmine","statuses":[{"release_codename":"artful","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.6.9, 3.0.6 and 3.1.3","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-8474","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:47:59.750985+00:00","description":"\nOpen redirect vulnerability in the valid_back_url function in\napp/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x\nbefore 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect\nusers to arbitrary web sites and conduct phishing attacks via a crafted\nback_url parameter, as demonstrated by \"@attacker.com,\" a different\nvulnerability than CVE-2014-1985.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.redmine.org/projects/redmine/wiki/Security_Advisories","https://www.redmine.org/issues/19577","http://www.openwall.com/lists/oss-security/2015/12/04/1","https://www.cve.org/CVERecord?id=CVE-2015-8474"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=807272"],"patches":{"redmine":[]},"tags":{},"packages":[{"name":"redmine","source":"https://ubuntu.com/security/cve?package=redmine","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=redmine","debian":"https://tracker.debian.org/pkg/redmine","statuses":[{"release_codename":"artful","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.6.7, 3.0.5 and 3.1.1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2015-8473","published":"2016-04-12T14:59:00","updated_at":"2025-08-25T21:47:59.750985+00:00","description":"\nThe Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x\nbefore 3.1.2 allows remote authenticated users to obtain sensitive\ninformation in changeset messages by leveraging permission to read issues\nwith related changesets from other projects.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.redmine.org/projects/redmine/wiki/Changelog_3_0","https://www.redmine.org/issues/21136","http://www.openwall.com/lists/oss-security/2015/12/03/7","https://github.com/redmine/redmine/commit/8d8f612fa368a72c56b63f7ce6b7e98cab9feb22","https://www.cve.org/CVERecord?id=CVE-2015-8473"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=807345"],"patches":{"redmine":["upstream: https://github.com/redmine/redmine/commit/8d8f612fa368a72c56b63f7ce6b7e98cab9feb22"]},"tags":{},"packages":[{"name":"redmine","source":"https://ubuntu.com/security/cve?package=redmine","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=redmine","debian":"https://tracker.debian.org/pkg/redmine","statuses":[{"release_codename":"artful","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.6.8, 3.0.6 and 3.1.2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.2.0-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":61220,"limit":20,"total_results":79316}