Skip to contentCanonical Ltd. vulnerabilities
Newest
- canonical lxdlxd has a restricted TLS certificate privilege escalation when in PKI modeCVE-2024-6219Fix available3.8 Low
- canonical lxdlxd CA certificate sign check bypassCVE-2024-6156Fix available3.8 Low
- pulseaudio, canonical ltd. ubuntu's pulseaudio +1 moreUbuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth...CVE-2024-115864.0 Medium
- canonical authdAuthd allows attacker-controlled usernames to yield controllable UIDsCVE-2024-9312Fix available7.5 High
- canonical authdPAM module may allow accessing with the credentials of another userCVE-2024-9313Fix available8.8 High
- canonical jujuVulnerable juju introspection abstract UNIX domain socketCVE-2024-8038Fix available7.9 High
- canonical jujuVulnerable juju hook tool abstract UNIX domain socketCVE-2024-8037Fix available6.5 Medium
- canonical jujuJUJU_CONTEXT_ID is a predictable authentication secretCVE-2024-7558Fix available8.7 High
- canonical anbox cloudAnbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS...CVE-2024-82877.5 High
- canonical ltd. wpa supplicantAn issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared...CVE-2024-5290Fix available8.8 High
- canonical jujuJuju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charmCVE-2024-6984Fix available8.8 High
- canonical ubuntu desktop provisionAn issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local...CVE-2024-6714Fix available8.8 High
- canonical ubuntu advantage desktop daemon, ubuntu advantage desktop pro +1 moreMarco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks...CVE-2024-6388Fix available5.9 Medium
- canonical netplannetplan leaks the private key of wireguard to local users. A security fix will be released soon.CVE-2022-4968Fix available6.5 Medium
- canonical snapdCVE-2024-5138: snapd snapctl auth bypassCVE-2024-5138Fix available8.1 High
- canonical pebblePebble service manager's file pull API allows access by any userCVE-2024-3250Fix available6.5 Medium
- canonical snapdsnapd will follow archived symlinks when unpacking a filesystemCVE-2024-29069Fix available4.8 Medium
- canonical snapdsnapd non-regular file indefinite blocking readCVE-2024-29068Fix available5.8 Medium
- canonical lxd, tianocore edk2 +1 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS...CVE-2023-49721Fix available6.7 Medium
- tianocore edk2, canonical lxd, canonical ltd. ubuntu edk ii +1 more +3 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...CVE-2023-48733Fix available6.7 Medium
- canonical ubuntu pipewire-pulseUbuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio...CVE-2022-4964Fix available5.5 Medium
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome control center +2 moreIn Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system...CVE-2023-5616Fix available4.9 Medium
- canonical subiquitySensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in...CVE-2023-51825.5 Medium
- canonical accountsservice, ubuntu linux, canonical ltd. accountservice +2 moreIn Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free...CVE-2023-3297Fix available8.1 High
- canonical landscapeLandscape Open RedirectCVE-2023-325516.1 Medium
- canonical landscapeLandscape's Apache server-status is accessible by defaultCVE-2023-325509.3 Critical
- canonical landscapeLandscape insecure token generationCVE-2023-325496.8 Medium
- canonical ubuntu linux, canonical ltd. ubuntu-linux +1 moreshiftfs lock unbalance in Ubuntu-specific kernelsCVE-2023-2612Fix available4.4 Medium
- canonical snapd, ubuntu linux +1 moreUsing the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the...CVE-2023-1523Fix available10.0 Critical
- canonical cloud-init, ubuntu linux, fedoraproject fedora +2 moresensitive data exposure in cloud-init logsCVE-2023-1786Fix available5.5 Medium
- canonical apport, ubuntu linux +1 morelocal privilege escalation in apport-cliCVE-2023-1326Public exploitFix available7.7 High
- canonical jujuJuju controller - Arbitrary file reading vulnerabilityCVE-2023-0092Fix available4.9 Medium
- canonical snapd, ubuntu linux +1 moresnapd Race Condition vulnerabilityCVE-2022-3328Public exploitFix available7.8 High
- canonical cloud-init, ubuntu linux +1 moresensitive data exposure in cloud-init logsCVE-2022-2084Fix available5.5 Medium
- canonical apportUsers can consume unlimited disk space in /var/crashCVE-2022-286537.5 High
- apport project apport, canonical ubuntu linux +1 moreApport argument parsing mishandles filename splitting on older kernels resulting in argument...CVE-2022-28658Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreApport does not disable python crash handler before entering chrootCVE-2022-28657Fix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to consume RAM in the Apport processCVE-2022-28656Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to create arbitrary tcp dbus connectionsCVE-2022-28655Fix available7.1 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to fill up apport.logCVE-2022-28654Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 more~/.config/apport/settings parsing is vulnerable to "billion laughs" attackCVE-2022-28652Fix available5.5 Medium
- canonical apport, ubuntu linux +1 moreApport can be tricked into connecting to arbitrary sockets as the root userCVE-2022-1242Fix available7.8 High
- apport, canonical ubuntu linux +1 moreThere is a race condition in the 'replaced executable' detection that, with the correct local...CVE-2021-3899Public exploitFix available7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome gnome-remote-desktop +2 moreUbuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by...CVE-2022-1736Fix available9.8 Critical
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsCVE-2021-4120Fix available8.2 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- canonical subiquitySubiquity Shows Guided Storage Passphrase in Plaintext with Read-all PermissionsCVE-2022-05558.4 High
- canonical cloud-initsensitive data exposure in cloud-init logsCVE-2021-3429Fix available5.5 Medium
- canonical snapd, ubuntu linux +1 moreWhen generating the systemd service units for the docker snap (and other similar snaps), snapd...CVE-2020-27352Fix available9.3 Critical
- Show olderLoading…