{"cves":[{"id":"CVE-2011-0284","published":"2011-03-15T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nDouble free vulnerability in the prepare_error_as function in do_as_req.c\nin the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7\nthrough 1.9, when the PKINIT feature is enabled, allows remote attackers to\ncause a denial of service (daemon crash) or possibly execute arbitrary code\nvia an e_data field containing typed data.","ubuntu_description":"\nCameron Meadors discovered that the MIT Kerberos 5 Key Distribution\nCenter (KDC) daemon is vulnerable to a double-free condition if\nthe Public Key Cryptography for Initial Authentication (PKINIT)\ncapability is enabled. This could allow a remote attacker to cause\na denial of service.","notes":[{"author":"sbeattie","note":"CRD Tuesday, 15 March 2011, at 14:00 US/Eastern time"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1088-1","https://www.cve.org/CVERecord?id=CVE-2011-0284"],"bugs":[""],"patches":{"krb5":["upstream: http://web.mit.edu/kerberos/advisories/2011-003-patch.txt"]},"tags":{},"packages":[{"name":"krb5","source":"https://ubuntu.com/security/cve?package=krb5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=krb5","debian":"https://tracker.debian.org/pkg/krb5","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"1.7dfsg~beta3-1ubuntu0.12","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"1.8.1+dfsg-2ubuntu0.8","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"1.8.1+dfsg-5ubuntu0.6","component":null,"pocket":"security"},{"release_codename":"upstream","status":"pending","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1088-1"],"notices":[{"id":"USN-1088-1","title":"Kerberos vulnerability","summary":"MIT Kerberos 5 Key Distribution Center (KDC) daemon denial of service\nvulnerability.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2011-03-15T19:03:48.618730","description":"Cameron Meadors discovered that the MIT Kerberos 5 Key Distribution\nCenter (KDC) daemon is vulnerable to a double-free condition if\nthe Public Key Cryptography for Initial Authentication (PKINIT)\ncapability is enabled. This could allow a remote attacker to cause\na denial of service.\n","is_hidden":false,"release_packages":{"karmic":[{"name":"krb5","version":"1.7dfsg~beta3-1ubuntu0.12","description":"MIT Kerberos primary server (kadmind)","is_source":true},{"name":"krb5-kdc","version":"1.7dfsg~beta3-1ubuntu0.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/krb5","version_link":"https://launchpad.net/ubuntu/+source/krb5/1.7dfsg~beta3-1ubuntu0.12"}],"lucid":[{"name":"krb5","version":"1.8.1+dfsg-2ubuntu0.8","description":"MIT Kerberos master server (kadmind)","is_source":true},{"name":"krb5-kdc","version":"1.8.1+dfsg-2ubuntu0.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/krb5","version_link":"https://launchpad.net/ubuntu/+source/krb5/1.8.1+dfsg-2ubuntu0.8"}],"maverick":[{"name":"krb5","version":"1.8.1+dfsg-5ubuntu0.6","description":"MIT Kerberos master server (kadmind)","is_source":true},{"name":"krb5-kdc","version":"1.8.1+dfsg-5ubuntu0.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/krb5","version_link":"https://launchpad.net/ubuntu/+source/krb5/1.8.1+dfsg-5ubuntu0.6"}]},"type":"USN","cves_ids":["CVE-2011-0284"]}]},{"id":"CVE-2011-0001","published":"2011-03-15T00:00:00","updated_at":"2025-08-04T19:23:57.690614+00:00","description":"\nDouble free vulnerability in the iscsi_rx_handler function\n(usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target\nframework (tgt) before 1.0.14, aka scsi-target-utils, allows remote\nattackers to cause a denial of service (memory corruption and crash) and\npossibly execute arbitrary code via unknown vectors related to a buffer\noverflow during iscsi login.  NOTE: some of these details are obtained from\nthird party information.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"actually got fixed in 1.0.15"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1156-1","https://www.cve.org/CVERecord?id=CVE-2011-0001"],"bugs":[""],"patches":{"tgt":["upstream: http://lists.wpkg.org/pipermail/stgt/2011-March/004473.html"]},"tags":{},"packages":[{"name":"tgt","source":"https://ubuntu.com/security/cve?package=tgt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tgt","debian":"https://tracker.debian.org/pkg/tgt","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"1:1.0.4-1ubuntu4.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"1:1.0.13-0ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"1:1.0.13-0ubuntu3","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"1:1.0.13-0ubuntu3","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"1:1.0.13-0ubuntu3","component":null,"pocket":"security"},{"release_codename":"raring","status":"released","description":"1:1.0.13-0ubuntu3","component":null,"pocket":"security"},{"release_codename":"saucy","status":"released","description":"1:1.0.13-0ubuntu3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.0.15","component":null,"pocket":"security"}]}],"notices_ids":["USN-1156-1"],"notices":[{"id":"USN-1156-1","title":"tgt vulnerabilities","summary":"An attacker could send crafted input to tgt and cause it to crash or run\narbitrary programs.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2011-06-21T12:10:30.020001","description":"It was discovered that tgt incorrectly handled long iSCSI name strings, and\ninvalid PDUs. A remote attacker could exploit this to cause tgt to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 10.10. (CVE-2010-2221)\n\nEmmanuel Bouillon discovered that tgt incorrectly handled certain iSCSI\nlogins. A remote attacker could exploit this to cause tgt to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2011-0001)\n","is_hidden":false,"release_packages":{"maverick":[{"name":"tgt","version":"1:1.0.4-1ubuntu4.1","description":"Linux SCSI target user-space tools","is_source":true},{"name":"tgt","version":"1:1.0.4-1ubuntu4.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/tgt","version_link":"https://launchpad.net/ubuntu/+source/tgt/1:1.0.4-1ubuntu4.1"}],"natty":[{"name":"tgt","version":"1:1.0.13-0ubuntu2.1","description":"Linux SCSI target user-space tools","is_source":true},{"name":"tgt","version":"1:1.0.13-0ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/tgt","version_link":"https://launchpad.net/ubuntu/+source/tgt/1:1.0.13-0ubuntu2.1"}]},"type":"USN","cves_ids":["CVE-2010-2221","CVE-2011-0001"]}]},{"id":"CVE-2010-1675","published":"2011-03-15T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nbgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of\nservice (session reset) via a malformed AS_PATHLIMIT path attribute.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"dapper doesn't have AS_PATHLIMIT"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1095-1","https://www.cve.org/CVERecord?id=CVE-2010-1675"],"bugs":[""],"patches":{"quagga":[]},"tags":{},"packages":[{"name":"quagga","source":"https://ubuntu.com/security/cve?package=quagga","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=quagga","debian":"https://tracker.debian.org/pkg/quagga","statuses":[{"release_codename":"dapper","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"0.99.9-2ubuntu1.5","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"0.99.13-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"0.99.15-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"0.99.17-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.99.18","component":null,"pocket":"security"}]}],"notices_ids":["USN-1095-1"],"notices":[{"id":"USN-1095-1","title":"Quagga vulnerabilities","summary":"An attacker could send crafted input to Quagga and cause it to crash.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2011-03-29T16:52:37.593965","description":"It was discovered that Quagga incorrectly parsed certain malformed extended\ncommunities. A remote attacker could use this flaw to cause Quagga to\ncrash, resulting in a denial of service. (CVE-2010-1674)\n\nIt was discovered that Quagga resets BGP sessions when encountering\nmalformed AS_PATHLIMIT attributes. A remote attacker could use this flaw to\ndisrupt BGP sessions, resulting in a denial of service. This update removes\nAS_PATHLIMIT support from Quagga. This issue only affected Ubuntu 8.04 LTS,\n9.10, 10.04 LTS and 10.10. (CVE-2010-1675)\n","is_hidden":false,"release_packages":{"hardy":[{"name":"quagga","version":"0.99.9-2ubuntu1.5","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.9-2ubuntu1.5","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.9-2ubuntu1.5"}],"lucid":[{"name":"quagga","version":"0.99.15-1ubuntu0.2","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.15-1ubuntu0.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.15-1ubuntu0.2"}],"maverick":[{"name":"quagga","version":"0.99.17-1ubuntu0.1","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.17-1ubuntu0.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.17-1ubuntu0.1"}],"dapper":[{"name":"quagga","version":"0.99.2-1ubuntu3.8","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.2-1ubuntu3.8","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.2-1ubuntu3.8"}],"karmic":[{"name":"quagga","version":"0.99.13-1ubuntu0.2","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.13-1ubuntu0.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.13-1ubuntu0.2"}]},"type":"USN","cves_ids":["CVE-2010-1675","CVE-2010-1674"]}]},{"id":"CVE-2010-1674","published":"2011-03-15T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe extended-community parser in bgpd in Quagga before 0.99.18 allows\nremote attackers to cause a denial of service (NULL pointer dereference and\napplication crash) via a malformed Extended Communities attribute.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1095-1","https://www.cve.org/CVERecord?id=CVE-2010-1674"],"bugs":[""],"patches":{"quagga":[]},"tags":{},"packages":[{"name":"quagga","source":"https://ubuntu.com/security/cve?package=quagga","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=quagga","debian":"https://tracker.debian.org/pkg/quagga","statuses":[{"release_codename":"dapper","status":"released","description":"0.99.2-1ubuntu3.8","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"0.99.9-2ubuntu1.5","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"0.99.13-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"0.99.15-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"0.99.17-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.99.18","component":null,"pocket":"security"}]}],"notices_ids":["USN-1095-1"],"notices":[{"id":"USN-1095-1","title":"Quagga vulnerabilities","summary":"An attacker could send crafted input to Quagga and cause it to crash.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2011-03-29T16:52:37.593965","description":"It was discovered that Quagga incorrectly parsed certain malformed extended\ncommunities. A remote attacker could use this flaw to cause Quagga to\ncrash, resulting in a denial of service. (CVE-2010-1674)\n\nIt was discovered that Quagga resets BGP sessions when encountering\nmalformed AS_PATHLIMIT attributes. A remote attacker could use this flaw to\ndisrupt BGP sessions, resulting in a denial of service. This update removes\nAS_PATHLIMIT support from Quagga. This issue only affected Ubuntu 8.04 LTS,\n9.10, 10.04 LTS and 10.10. (CVE-2010-1675)\n","is_hidden":false,"release_packages":{"hardy":[{"name":"quagga","version":"0.99.9-2ubuntu1.5","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.9-2ubuntu1.5","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.9-2ubuntu1.5"}],"lucid":[{"name":"quagga","version":"0.99.15-1ubuntu0.2","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.15-1ubuntu0.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.15-1ubuntu0.2"}],"maverick":[{"name":"quagga","version":"0.99.17-1ubuntu0.1","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.17-1ubuntu0.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.17-1ubuntu0.1"}],"dapper":[{"name":"quagga","version":"0.99.2-1ubuntu3.8","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.2-1ubuntu3.8","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.2-1ubuntu3.8"}],"karmic":[{"name":"quagga","version":"0.99.13-1ubuntu0.2","description":"BGP/OSPF/RIP routing daemon","is_source":true},{"name":"quagga","version":"0.99.13-1ubuntu0.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/quagga","version_link":"https://launchpad.net/ubuntu/+source/quagga/0.99.13-1ubuntu0.2"}]},"type":"USN","cves_ids":["CVE-2010-1675","CVE-2010-1674"]}]},{"id":"CVE-2011-0701","published":"2011-03-14T19:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nwp-admin/async-upload.php in the media uploader in WordPress before 3.0.5\nallows remote authenticated users to read (1) draft posts or (2) private\nposts via a modified attachment_id parameter.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0701"],"bugs":[""],"patches":{"wordpress":[]},"tags":{},"packages":[{"name":"wordpress","source":"https://ubuntu.com/security/cve?package=wordpress","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wordpress","debian":"https://tracker.debian.org/pkg/wordpress","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.5","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0700","published":"2011-03-14T19:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMultiple cross-site scripting (XSS) vulnerabilities in WordPress before\n3.0.5 allow remote authenticated users to inject arbitrary web script or\nHTML via vectors related to (1) the Quick/Bulk Edit title (aka post title\nor post_title), (2) post_status, (3) comment_status, (4) ping_status, and\n(5) escaping of tags within the tags meta box.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0700"],"bugs":[""],"patches":{"wordpress":[]},"tags":{},"packages":[{"name":"wordpress","source":"https://ubuntu.com/security/cve?package=wordpress","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wordpress","debian":"https://tracker.debian.org/pkg/wordpress","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"3.0.5+dfsg-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.5","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0432","published":"2011-03-14T19:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nMultiple SQL injection vulnerabilities in the get_userinfo method in the\nMySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1\nallow remote attackers to execute arbitrary SQL commands via the (1) user\nor (2) pw argument.  NOTE: some of these details are obtained from third\nparty information.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0432"],"bugs":[""],"patches":{"pywebdav":[]},"tags":{},"packages":[{"name":"pywebdav","source":"https://ubuntu.com/security/cve?package=pywebdav","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pywebdav","debian":"https://tracker.debian.org/pkg/pywebdav","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"0.9.4-1+squeeze1build0.10.10.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"0.9.4-3","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"0.9.4-3","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"0.9.4-3","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"0.9.4-3","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"0.9.4-3","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"0.9.4-3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.9.4-3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-1091","published":"2011-03-14T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nlibymsg.c in the Yahoo! protocol plugin in libpurple in Pidgin 2.6.0\nthrough 2.7.10 allows (1) remote authenticated users to cause a denial of\nservice (NULL pointer dereference and application crash) via a malformed\nYMSG notification packet, and allows (2) remote Yahoo! servers to cause a\ndenial of service (NULL pointer dereference and application crash) via a\nmalformed YMSG SMS message.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"just a DoS"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://pidgin.im/news/security/?id=51","https://ubuntu.com/security/notices/USN-1273-1","https://www.cve.org/CVERecord?id=CVE-2011-1091"],"bugs":[""],"patches":{"pidgin":["upstream: http://developer.pidgin.im/viewmtn/revision/info/a7c415abba1f5f01f79295337518837f73d99bb7","vendor: https://rhn.redhat.com/errata/RHSA-2011-1371.html"]},"tags":{},"packages":[{"name":"pidgin","source":"https://ubuntu.com/security/cve?package=pidgin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pidgin","debian":"https://tracker.debian.org/pkg/pidgin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"1:2.6.6-1ubuntu4.4","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"1:2.7.3-1ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"1:2.7.11-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"1:2.7.11-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.7.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-1273-1"],"notices":[{"id":"USN-1273-1","title":"Pidgin vulnerabilities","summary":"Pidgin could be made to crash if it received specially crafted network\ntraffic.\n","instructions":"After a standard system update you need to restart Pidgin to make\nall the necessary changes.\n","references":[],"published":"2011-11-21T19:56:10.502104","description":"Marius Wachtler discovered that Pidgin incorrectly handled malformed YMSG\nmessages in the Yahoo! protocol handler. A remote attacker could send a\nspecially crafted message and cause Pidgin to crash, leading to a denial\nof service. This issue only affected Ubuntu 10.04 LTS and 10.10.\n(CVE-2011-1091)\n\nMarius Wachtler discovered that Pidgin incorrectly handled HTTP 100\nresponses in the MSN protocol handler. A remote attacker could send a\nspecially crafted message and cause Pidgin to crash, leading to a denial\nof service. (CVE-2011-3184)\n\nDiego Bauche Madero discovered that Pidgin incorrectly handled UTF-8\nsequences in the SILC protocol handler. A remote attacker could send a\nspecially crafted message and cause Pidgin to crash, leading to a denial\nof service.  (CVE-2011-3594)\n","is_hidden":false,"release_packages":{"lucid":[{"name":"pidgin","version":"1:2.6.6-1ubuntu4.4","description":"graphical multi-protocol instant messaging client for X","is_source":true},{"name":"pidgin","version":"1:2.6.6-1ubuntu4.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/pidgin","version_link":"https://launchpad.net/ubuntu/+source/pidgin/1:2.6.6-1ubuntu4.4"}],"maverick":[{"name":"pidgin","version":"1:2.7.3-1ubuntu3.3","description":"multi-protocol instant messaging client","is_source":true},{"name":"pidgin","version":"1:2.7.3-1ubuntu3.3","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/pidgin","version_link":"https://launchpad.net/ubuntu/+source/pidgin/1:2.7.3-1ubuntu3.3"}],"natty":[{"name":"pidgin","version":"1:2.7.11-1ubuntu2.1","description":"multi-protocol instant messaging client","is_source":true},{"name":"pidgin","version":"1:2.7.11-1ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/pidgin","version_link":"https://launchpad.net/ubuntu/+source/pidgin/1:2.7.11-1ubuntu2.1"}]},"type":"USN","cves_ids":["CVE-2011-1091","CVE-2011-3594","CVE-2011-3184"]}]},{"id":"CVE-2011-0169","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does\nnot properly handle the window.console._inspectorCommandLineAPI property,\nwhich allows user-assisted remote attackers to bypass the Same Origin\nPolicy and conduct cross-site scripting (XSS) attacks via a crafted web\nsite.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0169"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0167","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe windows functionality in WebKit in Apple Safari before 5.0.4 allows\nremote attackers to bypass the Same Origin Policy, and force the upload of\narbitrary local files from a client computer, via a crafted web site.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0167"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0166","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe HTML5 drag and drop functionality in WebKit in Apple Safari before\n5.0.4 allows user-assisted remote attackers to bypass the Same Origin\nPolicy and obtain sensitive information via vectors related to the dragging\nof content.  NOTE: this might overlap CVE-2011-0778.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0166"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0163","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not\nproperly handle unspecified \"cached resources,\" which allows remote\nattackers to cause a denial of service (resource unavailability) via a\ncrafted web site that conducts a cache-poisoning attack.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0163"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0161","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not\nproperly handle the Attr.style accessor, which allows remote attackers to\nbypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token\nsequences via a crafted web site.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0161"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0160","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not\nproperly handle redirects in conjunction with HTTP Basic Authentication,\nwhich might allow remote web servers to capture credentials by logging the\nAuthorization HTTP header.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0160"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0157","published":"2011-03-11T22:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nWebKit, as used in Apple iOS before 4.3, allows remote attackers to execute\narbitrary code or cause a denial of service (memory corruption and\napplication crash) via a crafted web site, a different vulnerability than\nother CVEs listed in APPLE-SA-2011-03-09-1.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0157"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-1290","published":"2011-03-11T21:57:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nInteger overflow in WebKit, as used on the Research In Motion (RIM)\nBlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before\n10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to\nexecute arbitrary code via unknown vectors related to CSS \"style handling,\"\nnodesets, and a length value, as demonstrated by Vincenzo Iozzo, Willem\nPinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at\nCanSecWest 2011.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-1290"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[],"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"3.0.1271.97-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.0.648.133~r77742-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"3.0.1271.97-0ubuntu0.11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"3.0.1271.97-0ubuntu0.12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"3.0.1271.97-0ubuntu0.12.10.1","component":null,"pocket":"security"},{"release_codename":"raring","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.0.648.133~r77742","component":null,"pocket":"security"},{"release_codename":"utopic","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"released","description":"10.0.648.133~r77742-0ubuntu1","component":null,"pocket":"security"}]},{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-1416","published":"2011-03-11T17:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246\nallows attackers to read the contents of memory locations via unknown\nvectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and\nRalf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-1416"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [no update available]","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.4.9-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [2.4.8-1ubuntu1~ubuntu14.04.1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-1415","published":"2011-03-11T17:55:00","updated_at":"2025-08-04T19:23:59.862189+00:00","description":"\nRejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs:\nCVE-2011-1290.  Reason: This candidate is a duplicate of CVE-2011-1290.\nNotes: All CVE users should reference CVE-2011-1290 instead of this\ncandidate.  All references and descriptions in this candidate have been\nremoved to prevent accidental usage","ubuntu_description":"","notes":[{"author":"jdstrand","note":"qt4-x11 unmaintained upstream (see README.webkit for details)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-1415"],"bugs":[""],"patches":{"webkit":[],"webkitgtk":[],"qt4-x11":[],"qtwebkit-source":[]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"dapper","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"no webkit","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"webkit isn't built","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was ignored]","component":null,"pocket":"security"}]},{"name":"webkit","source":"https://ubuntu.com/security/cve?package=webkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit","debian":"https://tracker.debian.org/pkg/webkit","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"maverick","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was ignored]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-1137","published":"2011-03-11T17:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nInteger overflow in the mod_sftp (aka SFTP) module in ProFTPD 1.3.3d and\nearlier allows remote attackers to cause a denial of service (memory\nconsumption leading to OOM kill) via a malformed SSH message.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-1137"],"bugs":[""],"patches":{"proftpd-dfsg":["upstream: http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/mod_sftp.c?r1=1.29.2.1&r2=1.29.2.2","upstream: http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.h?r1=1.3&r2=1.3.2.1","upstream: http://proftp.cvs.sourceforge.net/viewvc/proftp/proftpd/contrib/mod_sftp/packet.c?r1=1.14.2.2&r2=1.14.2.3"]},"tags":{},"packages":[{"name":"proftpd-dfsg","source":"https://ubuntu.com/security/cve?package=proftpd-dfsg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=proftpd-dfsg","debian":"https://tracker.debian.org/pkg/proftpd-dfsg","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"1.3.3d-4","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"1.3.3d-4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0456","published":"2011-03-11T17:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nwebscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows\nremote attackers to execute arbitrary commands via unspecified vectors,\nrelated to a \"command injection vulnerability.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"high","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0456"],"bugs":[""],"patches":{"otrs2":[]},"tags":{},"packages":[{"name":"otrs2","source":"https://ubuntu.com/security/cve?package=otrs2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=otrs2","debian":"https://tracker.debian.org/pkg/otrs2","statuses":[{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"karmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":71460,"limit":20,"total_results":79316}