Skip to contentCanonical Ubuntu vulnerabilities
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...CVE-2015-8567Fix available7.7 High
- samba, canonical ubuntu linux, debian linux +2 moreThe samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4...CVE-2015-8467Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return...CVE-2015-7540Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x...CVE-2015-5299Fix availableEPSS 13.6%5.3 Medium
- samba, canonical ubuntu linux, debian linux +2 moreSamba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections...CVE-2015-5296Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +2 morevfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3,...CVE-2015-5252Fix availableEPSS 13.3%7.2 High
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +1 more +3 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0...CVE-2015-8560Fix available7.3 High
- pygments, canonical ubuntu linux +1 moreCommand Injection in PygmentsCVE-2015-8557Fix available9.0 Critical
- sos project sos, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreSoSReport Predictable Tmp File NamesCVE-2015-7529Fix available7.8 High
- git project git, canonical ubuntu linux, opensuse +1 more +3 moreThe (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4...CVE-2015-7545Public exploitFix availableEPSS 18.7%9.8 Critical
- canonical lxcfs, ubuntu linux +1 moreThe do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions,...CVE-2015-13447.2 High
- canonical lxcfs, ubuntu linux +1 moreLXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to...CVE-2015-13424.6 Medium
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...CVE-2015-3196Fix availableEPSS 13.5%4.3 Medium
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 morecrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...CVE-2015-3194Public exploitFix availableEPSS 44.0%7.5 High
- openssl, canonical ubuntu linux, nodejs node.js +2 moreThe Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1...CVE-2015-3193Fix availableEPSS 25.1%7.5 High
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +6 more +8 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...CVE-2015-8327Fix availableEPSS 10.6%7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3...CVE-2015-8365Fix available6.8 Medium
- ffmpeg, canonical ubuntu linux +1 moreInteger overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2...CVE-2015-8364Fix available6.8 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 High
- debian dpkg, canonical ubuntu linux +1 moreOff-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in...CVE-2015-0860Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- canonical ubuntu linux, nvidia gpu driver +1 moreMultiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340...CVE-2015-7869Fix available6.6 Medium
- canonical ubuntu linuxThe lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world...CVE-2015-82224.6 Medium
- debian linux, linux kernel, xen +3 more +5 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...CVE-2015-8104Fix available4.7 Medium
- strongswan, canonical ubuntu linux +1 moreThe server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4...CVE-2015-8023Fix available5.0 Medium
- libsndfile project libsndfile, canonical ubuntu linux, opensuse leap +1 more +3 moreThe psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service ...CVE-2014-9756Fix available5.0 Medium
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- debian linux, linux kernel, xen +2 more +4 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...CVE-2015-5307Fix available4.9 Medium
- xmlsoft libxml2, apple iphone os, mac os x +4 more +6 moreThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...CVE-2015-8035Fix available2.6 Low
- busybox, canonical ubuntu linux, debian linux +2 morehuft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer,...CVE-2015-9261Fix available5.5 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 moreThe build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...CVE-2015-2697Fix available4.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 morelib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate...CVE-2015-2696Fix available7.1 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 morelib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...CVE-2015-2695Fix available5.0 Medium
- xscreensaver project xscreensaver, canonical ubuntu linux +1 moredriver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency...CVE-2015-8025Fix available2.1 Low
- canonical apport, ubuntu linux +1 moreApport privilege escalation through Python module importsCVE-2015-1341Fix available7.4 High
- libpng, canonical ubuntu linux, debian linux +7 more +9 moreThe png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,...CVE-2015-7981Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +6 more +8 moreThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...CVE-2015-7942Fix available6.8 Medium
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4913Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated...CVE-2015-4895Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4879Fix available4.6 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4870Public exploitFix availableEPSS 30.1%4.0 Medium
- oracle mysql, canonical ubuntu linux, mariadb +2 moreUnspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated...CVE-2015-4866Fix available4.0 Medium
- Show moreLoading…