CVE-2016-4760 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support.