USN-2955-1
See a problem?- Source
- https://ubuntu.com/security/notices/USN-2955-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2955-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-2955-1
- Related
- Published
- 2016-04-27T21:10:46.988733Z
- Modified
- 2016-04-27T21:10:46.988733Z
- Summary
- oxide-qt vulnerabilities
- Details
-
A use-after-free was discovered when responding synchronously to permission requests. An attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program. (CVE-2016-1578)
An out-of-bounds read was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash. (CVE-2016-1646)
A use-after-free was discovered in the navigation implementation in Chromium in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program. (CVE-2016-1647)
A buffer overflow was discovered in ANGLE. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program. (CVE-2016-1649)
An out-of-bounds write was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed renderer process. (CVE-2016-1653)
An invalid read was discovered in the media subsystem in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash. (CVE-2016-1654)
It was discovered that frame removal during callback execution could trigger a use-after-free in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the sandboxed renderer process. (CVE-2016-1655)
Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking the program. (CVE-2016-1659)
Multiple security issues were discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service via renderer crash or execute arbitrary code with the privileges of the sandboxed render process. (CVE-2016-3679)
- References
-
- https://ubuntu.com/security/notices/USN-2955-1
- https://ubuntu.com/security/CVE-2016-1578
- https://ubuntu.com/security/CVE-2016-1646
- https://ubuntu.com/security/CVE-2016-1647
- https://ubuntu.com/security/CVE-2016-1649
- https://ubuntu.com/security/CVE-2016-1653
- https://ubuntu.com/security/CVE-2016-1654
- https://ubuntu.com/security/CVE-2016-1655
- https://ubuntu.com/security/CVE-2016-1659
- https://ubuntu.com/security/CVE-2016-3679
- https://launchpad.net/bugs/1561450
Affected packages
Ubuntu:14.04:LTS / oxide-qt
Package
- Name
- oxide-qt
- Purl
- pkg:deb/ubuntu/oxide-qt@1.14.7-0ubuntu0.14.04.1?arch=src?distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.14.7-0ubuntu0.14.04.1
Affected versions
1.*
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"liboxideqtquick-dev": "1.14.7-0ubuntu0.14.04.1",
"liboxideqtcore-dev": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-codecs-extra-dbgsym": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-codecs-extra-dbg": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-codecs-dbgsym": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-codecs-dbg": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-chromedriver": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-codecs-extra": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-dbg": "1.14.7-0ubuntu0.14.04.1",
"liboxideqt-qmlplugin": "1.14.7-0ubuntu0.14.04.1",
"oxideqmlscene": "1.14.7-0ubuntu0.14.04.1",
"oxideqt-codecs": "1.14.7-0ubuntu0.14.04.1",
"liboxideqtquick0": "1.14.7-0ubuntu0.14.04.1",
"liboxideqtcore0": "1.14.7-0ubuntu0.14.04.1",
"liboxideqtcore0-dbgsym": "1.14.7-0ubuntu0.14.04.1"
}
]
}
Ubuntu:16.04:LTS / oxide-qt
Package
- Name
- oxide-qt
- Purl
- pkg:deb/ubuntu/oxide-qt@1.14.7-0ubuntu1?arch=src?distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.14.7-0ubuntu1
Affected versions
1.*
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"oxideqt-codecs-dbgsym": "1.14.7-0ubuntu1",
"liboxideqtcore0": "1.14.7-0ubuntu1",
"oxideqt-codecs-extra-dbgsym": "1.14.7-0ubuntu1",
"oxideqt-codecs-extra": "1.14.7-0ubuntu1",
"liboxideqtquick0": "1.14.7-0ubuntu1",
"liboxideqt-qmlplugin": "1.14.7-0ubuntu1",
"oxideqt-codecs": "1.14.7-0ubuntu1",
"liboxideqtquick-dev": "1.14.7-0ubuntu1",
"liboxideqtcore-dev": "1.14.7-0ubuntu1",
"liboxideqtcore0-dbgsym": "1.14.7-0ubuntu1"
}
]
}