Skip to contentCanonical Ubuntu vulnerabilities
- gnupg, gnupg libksba, canonical ubuntu linux +2 more +4 moreInteger underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG,...CVE-2014-9087Fix available7.5 High
- canonical ubuntu linuxmountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount...CVE-2014-14217.2 High
- canonical ubuntu, ubuntu apparmor +1 moreapparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows...CVE-2014-1424Fix available6.4 Medium
- redhat tcpdump, canonical ubuntu linux, opensuse +1 more +3 moreMultiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in...CVE-2014-8768Public exploitFix availableEPSS 19.8%5.0 Medium
- canonical ubuntu linux, debian linux, freedesktop dbus +1 more +3 moreD-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local...CVE-2014-7824Fix available2.1 Low
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 Medium
- ffmpeg, canonical ubuntu linux +1 moreOff-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a...CVE-2014-8548Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows...CVE-2014-8547Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which...CVE-2014-8544Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks...CVE-2014-8543Fix available7.5 High
- ffmpeg, canonical ubuntu linux, debian linux +2 morelibavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of...CVE-2014-8542Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits...CVE-2014-8541Fix available7.5 High
- haxx libcurl, apple mac os x, canonical ubuntu linux +3 more +5 moreThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...CVE-2014-3707Fix available4.3 Medium
- libreoffice, canonical ubuntu linux, opensuse +3 more +5 moreUse-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4...CVE-2014-3693Fix available7.5 High
- quassel-irc quassel irc, canonical ubuntu linux, debian linux +1 more +3 moreThe blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to...CVE-2014-8483Fix available5.0 Medium
- ruby-lang ruby, canonical ubuntu linux, opensuse +1 more +3 moreThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...CVE-2014-8080Fix available5.0 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreThe GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5...CVE-2014-9709Fix availableEPSS 15.4%5.0 Medium
- canonical ubuntu linux, oracle jdk, jre +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity...CVE-2015-0413Fix available1.9 Low
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0412Fix available7.2 High
- oracle jrockit, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5...CVE-2015-0410Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0408Fix available10.0 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0407Fix available5.0 Medium
- canonical ubuntu linux, novell suse linux enterprise desktop, suse linux enterprise server +3 more +5 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0400Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise server +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0395Fix available9.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2015-0383Fix available5.4 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2014-6601Fix available10.0 High
- php, canonical ubuntu linux, debian linux +2 moreThe donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5...CVE-2014-3710Fix availableEPSS 14.0%5.0 Medium
- pidgin, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in...CVE-2014-3694Fix available6.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreRace condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM...CVE-2014-3611Fix available4.7 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu...CVE-2014-3689Fix available7.2 High
- gnu coreutils, canonical ubuntu linux +1 moreThe parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service...CVE-2014-9471Fix available7.5 High
- xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 Medium
- linux kernel, canonical ubuntu linux +1 moreThe do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the...CVE-2014-7975Fix available5.5 Medium
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morewpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using...CVE-2014-3686Fix available6.8 Medium
- openstack cinder, nova, trove +2 more +4 moreThe processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before...CVE-2014-7230Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- debian exuberant ctags, canonical ubuntu linux, debian linux +1 more +3 morejscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite...CVE-2014-7204Fix available5.0 Medium
- openstack neutron, canonical ubuntu linux +1 moreOpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to...CVE-2014-6414Fix available4.0 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreOpenStack Identity Keystone Exposure of Sensitive InformationCVE-2014-3621Fix available4.0 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...CVE-2014-7145Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 morenet/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate...CVE-2014-6418Fix available7.1 High
- linux kernel, canonical ubuntu linux +1 moreBuffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows...CVE-2014-6416Fix available7.8 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize...CVE-2015-3636Public exploitFix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel...CVE-2015-3331Fix availableEPSS 10.7%9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag...CVE-2015-2830Fix available1.9 Low
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the...CVE-2015-1421Fix available10.0 High
- Show moreLoading…