Test ID:	1.3.6.1.4.1.25623.1.0.842782
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2992-1)
Summary:	The remote host is missing an update for the 'oxide-qt' package(s) announced via the USN-2992-1 advisory.
Description:	Summary: The remote host is missing an update for the 'oxide-qt' package(s) announced via the USN-2992-1 advisory. Vulnerability Insight: An unspecified security issue was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2016-1673) An issue was discovered with Document reattachment in Blink in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2016-1675) A type confusion bug was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to obtain sensitive information. (CVE-2016-1677) A heap overflow was discovered in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash) or execute arbitrary code. (CVE-2016-1678) A use-after-free was discovered in the V8ValueConverter implementation in Chromium in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash) or execute arbitrary code. (CVE-2016-1679) A use-after-free was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash) or execute arbitrary code. (CVE-2016-1680) A security issue was discovered in ServiceWorker registration in Blink in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass Content Security Policy (CSP) protections. (CVE-2016-1682) An out-of-bounds memory access was discovered in libxslt. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash) or execute arbitrary code. (CVE-2016-1683) An integer overflow was discovered in libxslt. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash or resource consumption). (CVE-2016-1684) An out-of-bounds read was discovered in the regular expression implementation in V8. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash). (CVE-2016-1688) A heap overflow was discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service (application crash) or execute arbitrary code. (CVE-2016-1689) A heap overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'oxide-qt' package(s) on Ubuntu 14.04, Ubuntu 15.10, Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1673 BugTraq ID: 90876 http://www.securityfocus.com/bid/90876 Debian Security Information: DSA-3590 (Google Search) http://www.debian.org/security/2016/dsa-3590 https://security.gentoo.org/glsa/201607-07 RedHat Security Advisories: RHSA-2016:1190 https://access.redhat.com/errata/RHSA-2016:1190 http://www.securitytracker.com/id/1035981 SuSE Security Announcement: openSUSE-SU-2016:1430 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html SuSE Security Announcement: openSUSE-SU-2016:1433 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html SuSE Security Announcement: openSUSE-SU-2016:1496 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html http://www.ubuntu.com/usn/USN-2992-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-1675 Common Vulnerability Exposure (CVE) ID: CVE-2016-1677 Common Vulnerability Exposure (CVE) ID: CVE-2016-1678 Common Vulnerability Exposure (CVE) ID: CVE-2016-1679 Common Vulnerability Exposure (CVE) ID: CVE-2016-1680 Common Vulnerability Exposure (CVE) ID: CVE-2016-1682 Common Vulnerability Exposure (CVE) ID: CVE-2016-1683 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html BugTraq ID: 91826 http://www.securityfocus.com/bid/91826 Debian Security Information: DSA-3605 (Google Search) http://www.debian.org/security/2016/dsa-3605 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/ Common Vulnerability Exposure (CVE) ID: CVE-2016-1684 Common Vulnerability Exposure (CVE) ID: CVE-2016-1688 Common Vulnerability Exposure (CVE) ID: CVE-2016-1689 Common Vulnerability Exposure (CVE) ID: CVE-2016-1691 Common Vulnerability Exposure (CVE) ID: CVE-2016-1692 Common Vulnerability Exposure (CVE) ID: CVE-2016-1695 Common Vulnerability Exposure (CVE) ID: CVE-2016-1697 Debian Security Information: DSA-3594 (Google Search) http://www.debian.org/security/2016/dsa-3594 RedHat Security Advisories: RHSA-2016:1201 https://access.redhat.com/errata/RHSA-2016:1201 http://www.securitytracker.com/id/1036026 SuSE Security Announcement: SUSE-SU-2016:1490 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html SuSE Security Announcement: openSUSE-SU-2016:1489 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2016-1699 Common Vulnerability Exposure (CVE) ID: CVE-2016-1702 Common Vulnerability Exposure (CVE) ID: CVE-2016-1703
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.