Canonical Update-Manager vulnerabilities

2 CVEs affecting Canonical Update-Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-3152, published 2014-04-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-3152, published 2014-04-27. Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days. DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before…
CVE-2011-3154, published 2014-04-17. Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days. DistUpgrade/DistUpgradeViewKDE.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5…