{"cves":[{"id":"CVE-2014-4473","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4473"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4472","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4472"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4471","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4471"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4470","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4470"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4469","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4469"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4468","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4468"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4466","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x\nbefore 8.0.1, allows remote attackers to execute arbitrary code or cause a\ndenial of service (memory corruption and application crash) via a crafted\nweb site, a different vulnerability than other WebKit CVEs listed in\nAPPLE-SA-2014-12-2-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4466"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-4465","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1\nallows remote attackers to bypass the Same Origin Policy via crafted\nCascading Style Sheets (CSS) token sequences within an SVG file in the SRC\nattribute of an IMG element.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://support.apple.com/kb/HT6596","http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html","https://www.cve.org/CVERecord?id=CVE-2014-4465"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-0587","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 13.0.0.259 and 14.x through 16.x before\n16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows\nattackers to execute arbitrary code or cause a denial of service (memory\ncorruption) via unspecified vectors, a different vulnerability than\nCVE-2014-9164.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://helpx.adobe.com/security/products/flash-player/apsb14-27.html","https://www.cve.org/CVERecord?id=CVE-2014-0587"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"11.2.202.425-0precise1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"11.2.202.425-0trusty1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.2.202.425","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"11.2.202.425-0utopic1","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"11.2.202.425ubuntu0.12.04.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"11.2.202.425ubuntu0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.2.202.425","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"11.2.202.425ubuntu0.14.10.1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-0580","published":"2014-12-10T21:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 13.0.0.259 and 14.x through 16.x before\n16.0.0.235 on Windows and OS X and before 11.2.202.425 on Linux allows\nremote attackers to bypass the Same Origin Policy via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://helpx.adobe.com/security/products/flash-player/apsb14-27.html","https://www.cve.org/CVERecord?id=CVE-2014-0580"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"11.2.202.425-0precise1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"11.2.202.425-0trusty1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.2.202.425","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"11.2.202.425-0utopic1","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"11.2.202.425ubuntu0.12.04.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"11.2.202.425ubuntu0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"11.2.202.425","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"11.2.202.425ubuntu0.14.10.1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-9091","published":"2014-12-10T15:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nIcecast before 2.4.0 does not change the supplementary group privileges\nwhen is configured, which allows local users to gain\nprivileges via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://trac.xiph.org/changeset/19137/","http://www.openwall.com/lists/oss-security/2014/11/26","https://www.cve.org/CVERecord?id=CVE-2014-9091"],"bugs":["https://bugs.launchpad.net/ubuntu/+source/icecast2/+bug/1449771"],"patches":{"icecast2":["upstream: https://trac.xiph.org/changeset/19137/"]},"tags":{},"packages":[{"name":"icecast2","source":"https://ubuntu.com/security/cve?package=icecast2","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=icecast2","debian":"https://tracker.debian.org/pkg/icecast2","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.3.3-2ubuntu1.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.0-1","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"2.3.3-2ubuntu1.14.10.1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"2.4.0-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.0-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.0-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.0-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"2.4.0-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-8601","published":"2014-12-10T15:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nPowerDNS Recursor before 3.6.2 does not limit delegation chaining, which\nallows remote attackers to cause a denial of service (\"performance\ndegradations\") via a large or infinite number of referrals, as demonstrated\nby resolving domains hosted by ezdns.it.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://doc.powerdns.com/md/security/powerdns-advisory-2014-02/","http://www.securitytracker.com/id/1031310","https://www.cve.org/CVERecord?id=CVE-2014-8601"],"bugs":[""],"patches":{"pdns-recursor":[]},"tags":{},"packages":[{"name":"pdns-recursor","source":"https://ubuntu.com/security/cve?package=pdns-recursor","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=pdns-recursor","debian":"https://tracker.debian.org/pkg/pdns-recursor","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.5.3-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6.2-1","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"3.6.2-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.6.2-2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"3.6.2-2","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"3.6.2-2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"3.6.2-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-7809","published":"2014-12-10T15:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nApache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable \nvalues, which allows remote attackers to bypass the CSRF protection\nmechanism.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"2.0.0+"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.securitytracker.com/id/1031309","http://struts.apache.org/docs/s2-023.html","http://packetstormsecurity.com/files/129421/Apache-Struts-2.3.20-Security-Fixes.html","https://www.cve.org/CVERecord?id=CVE-2014-7809"],"bugs":[""],"patches":{"libstruts1.2-java":[]},"tags":{},"packages":[{"name":"libstruts1.2-java","source":"https://ubuntu.com/security/cve?package=libstruts1.2-java","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=libstruts1.2-java","debian":"https://tracker.debian.org/pkg/libstruts1.2-java","statuses":[{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-8602","published":"2014-12-10T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\niterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation\nchaining, which allows remote attackers to cause a denial of service\n(memory and CPU consumption) via a large or infinite number of referrals.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.unbound.net/pipermail/unbound-users/2014-December/003662.html","https://unbound.net/downloads/CVE-2014-8602.txt","http://unbound.net/downloads/patch_cve_2014_8602.diff","https://ubuntu.com/security/notices/USN-2484-1","https://www.cve.org/CVERecord?id=CVE-2014-8602"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772622"],"patches":{"unbound":[]},"tags":{},"packages":[{"name":"unbound","source":"https://ubuntu.com/security/cve?package=unbound","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=unbound","debian":"https://tracker.debian.org/pkg/unbound","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.4.22-1ubuntu4.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.22-3","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"1.4.22-1ubuntu4.14.10.1","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"1.4.22-1ubuntu5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.4.22-1ubuntu5","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"released","description":"1.4.22-1ubuntu5","component":null,"pocket":"security"},{"release_codename":"zesty","status":"released","description":"1.4.22-1ubuntu5","component":null,"pocket":"security"},{"release_codename":"vivid","status":"released","description":"1.4.22-1ubuntu5","component":null,"pocket":"security"}]}],"notices_ids":["USN-2484-1"],"notices":[{"id":"USN-2484-1","title":"Unbound vulnerability","summary":"Unbound could be made to consume resources if it received specially crafted\nnetwork traffic.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2015-01-26T13:21:48.324740","description":"Florian Maury discovered that Unbound incorrectly handled delegation. A\nremote attacker could possibly use this issue to cause Unbound to consume\nresources, resulting in a denial of service.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"unbound","version":"1.4.22-1ubuntu4.14.04.1","description":"validating, recursive, caching DNS resolver","is_source":true},{"name":"libunbound-dev","version":"1.4.22-1ubuntu4.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.04.1","pocket":"security"},{"name":"libunbound2","version":"1.4.22-1ubuntu4.14.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.04.1","pocket":"security"},{"name":"python-unbound","version":"1.4.22-1ubuntu4.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.04.1","pocket":"security"},{"name":"unbound","version":"1.4.22-1ubuntu4.14.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.04.1","pocket":"security"},{"name":"unbound-anchor","version":"1.4.22-1ubuntu4.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.04.1","pocket":"security"},{"name":"unbound-host","version":"1.4.22-1ubuntu4.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.04.1","pocket":"security"}],"utopic":[{"name":"unbound","version":"1.4.22-1ubuntu4.14.10.1","description":"validating, recursive, caching DNS resolver","is_source":true},{"name":"libunbound2","version":"1.4.22-1ubuntu4.14.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.10.1"},{"name":"unbound","version":"1.4.22-1ubuntu4.14.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.4.22-1ubuntu4.14.10.1"}]},"type":"USN","cves_ids":["CVE-2014-8602"]}]},{"id":"CVE-2014-8298","published":"2014-12-10T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before\nR331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before\nR346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver\nbefore R40 allows remote attackers to cause a denial of service\n(segmentation fault and X server crash) or possibly execute arbitrary code\nvia a crafted GLX indirect rendering protocol request.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://nvidia.custhelp.com/app/answers/detail/a_id/3610/kw/3610","https://ubuntu.com/security/notices/USN-2438-1","https://www.cve.org/CVERecord?id=CVE-2014-8298"],"bugs":[""],"patches":{"nvidia-graphics-drivers-304":[],"nvidia-graphics-drivers-304-updates":[],"nvidia-graphics-drivers-331":[],"nvidia-graphics-drivers-331-updates":[]},"tags":{},"packages":[{"name":"nvidia-graphics-drivers-304","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"304.125-0ubuntu0.0.0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"304.125-0ubuntu0.0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"304.125","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"304.125-0ubuntu0.1","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-304-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-304-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-304-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-304-updates","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"304.125-0ubuntu0.0.0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"304.125-0ubuntu0.0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"304.125","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"304.125-0ubuntu0.1","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"331.113-0ubuntu0.0.0.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"331.113-0ubuntu0.0.4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"331.113","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"331.113-0ubuntu0.1","component":null,"pocket":"security"}]},{"name":"nvidia-graphics-drivers-331-updates","source":"https://ubuntu.com/security/cve?package=nvidia-graphics-drivers-331-updates","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=nvidia-graphics-drivers-331-updates","debian":"https://tracker.debian.org/pkg/nvidia-graphics-drivers-331-updates","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"331.113-0ubuntu0.0.0.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"331.113-0ubuntu0.0.4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"331.113","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"331.113-0ubuntu0.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-2438-1"],"notices":[{"id":"USN-2438-1","title":"NVIDIA graphics drivers vulnerabilities","summary":"Several security issues were fixed in the NVIDIA graphics drivers.\n","instructions":"After a standard system update you need to reboot your computer to make\nall the necessary changes.\n","references":[],"published":"2014-12-10T18:35:36.157169","description":"It was discovered that the NVIDIA graphics drivers incorrectly handled GLX\nindirect rendering support. An attacker able to connect to an X server,\neither locally or remotely, could use these issues to cause the X server to\ncrash or execute arbitrary code resulting in possible privilege escalation.\n","is_hidden":false,"release_packages":{"precise":[{"name":"nvidia-graphics-drivers-304","version":"304.125-0ubuntu0.0.0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-304-updates","version":"304.125-0ubuntu0.0.0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-331","version":"331.113-0ubuntu0.0.0.3","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-331-updates","version":"331.113-0ubuntu0.0.0.3","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-304","version":"304.125-0ubuntu0.0.0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.0.1"},{"name":"nvidia-304-updates","version":"304.125-0ubuntu0.0.0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.0.1"},{"name":"nvidia-331","version":"331.113-0ubuntu0.0.0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.0.3"},{"name":"nvidia-331-updates","version":"331.113-0ubuntu0.0.0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.0.3"}],"trusty":[{"name":"nvidia-graphics-drivers-304","version":"304.125-0ubuntu0.0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-304-updates","version":"304.125-0ubuntu0.0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-331","version":"331.113-0ubuntu0.0.4","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-331-updates","version":"331.113-0ubuntu0.0.4","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"libcuda1-304","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"libcuda1-304-updates","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"libcuda1-331","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"libcuda1-331-updates","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-304","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-304-dev","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-304-updates","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-304-updates-dev","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-319","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-319-dev","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-319-updates","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-319-updates-dev","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-331","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-331-dev","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-331-updates","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-331-updates-dev","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-331-updates-uvm","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-331-uvm","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-current","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-current-dev","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-current-updates","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-current-updates-dev","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-experimental-304","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-experimental-304-dev","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-libopencl1-304","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-libopencl1-304-updates","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-libopencl1-331","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-libopencl1-331-updates","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-opencl-icd-304","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-opencl-icd-304-updates","version":"304.125-0ubuntu0.0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.0.1","pocket":"security"},{"name":"nvidia-opencl-icd-331","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"},{"name":"nvidia-opencl-icd-331-updates","version":"331.113-0ubuntu0.0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.0.4","pocket":"security"}],"utopic":[{"name":"nvidia-graphics-drivers-304","version":"304.125-0ubuntu0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-304-updates","version":"304.125-0ubuntu0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-331","version":"331.113-0ubuntu0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-graphics-drivers-331-updates","version":"331.113-0ubuntu0.1","description":"NVIDIA binary Xorg driver","is_source":true},{"name":"nvidia-304","version":"304.125-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.1"},{"name":"nvidia-304-updates","version":"304.125-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-304/304.125-0ubuntu0.1"},{"name":"nvidia-331","version":"331.113-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.1"},{"name":"nvidia-331-updates","version":"331.113-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331","version_link":"https://launchpad.net/ubuntu/+source/nvidia-graphics-drivers-331/331.113-0ubuntu0.1"}]},"type":"USN","cves_ids":["CVE-2014-8091","CVE-2014-8098","CVE-2014-8298"]}]},{"id":"CVE-2014-9351","published":"2014-12-09T23:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nengine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote\nattackers to read memory and cause a denial of service (crash) via\nunspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.teeworlds.com/?page=news&id=11200","https://github.com/teeworlds/teeworlds/commit/a766cb44bcffcdb0b88e776d01c5ee1323d44f85","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770514","http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145650.html","http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145173.html","http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145172.html","https://www.cve.org/CVERecord?id=CVE-2014-9351"],"bugs":["https://bugs.launchpad.net/ubuntu/+source/teeworlds/+bug/1486946"],"patches":{"teeworlds":[]},"tags":{},"packages":[{"name":"teeworlds","source":"https://ubuntu.com/security/cve?package=teeworlds","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=teeworlds","debian":"https://tracker.debian.org/pkg/teeworlds","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.6.2+dfsg-2~build0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.6.3","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"0.6.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"0.6.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"0.6.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"0.6.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"0.6.2+dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-9319","published":"2014-12-09T23:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe ff_hevc_decode_nal_sps function in libavcodec/hevc_ps.c in FFMpeg\nbefore 2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote\nattackers to cause a denial of service (out-of-bounds access) via a crafted\n.bit file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.ffmpeg.org/security.html","https://www.cve.org/CVERecord?id=CVE-2014-9319"],"bugs":[""],"patches":{"ffmpeg":["upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=ea38e5a6b75706477898eb1e6582d667dbb9946c"]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"7:2.5.4-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-9318","published":"2014-12-09T23:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe raw_decode function in libavcodec/rawdec.c in FFMpeg before 2.1.6,\n2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers to\ncause a denial of service (out-of-bounds heap access) and possibly have\nother unspecified impact via a crafted .cine file that triggers the\navpicture_get_size function to return a negative frame size.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.ffmpeg.org/security.html","https://www.cve.org/CVERecord?id=CVE-2014-9318"],"bugs":[""],"patches":{"ffmpeg":["upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=1d3a3b9f8907625b361420d48fe05716859620ff"]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"7:2.5.4-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-9317","published":"2014-12-09T23:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFMpeg before\n2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers\nto cause a denial of service (out-of-bounds heap access) and possibly have\nother unspecified impact via an IDAT before an IHDR in a PNG file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.ffmpeg.org/security.html","https://www.cve.org/CVERecord?id=CVE-2014-9317"],"bugs":[""],"patches":{"ffmpeg":["upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=79ceaf827be0b070675d4cd0a55c3386542defd8"]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"7:2.5.4-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2014-9316","published":"2014-12-09T23:59:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe mjpeg_decode_app function in libavcodec/mjpegdec.c in FFMpeg before\n2.1.6, 2.2.x through 2.3.x, and 2.4.x before 2.4.4 allows remote attackers\nto cause a denial of service (out-of-bounds heap access) and possibly have\nother unspecified impact via vectors related to LJIF tags in an MJPEG file.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.ffmpeg.org/security.html","https://www.cve.org/CVERecord?id=CVE-2014-9316"],"bugs":[""],"patches":{"ffmpeg":["upstream: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=0eecf40935b22644e6cd74c586057237ecfd6844"]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all§ion=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"7:2.5.4-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":64320,"limit":20,"total_results":79316}