Skip to contentCanonical Ubuntu vulnerabilities
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...CVE-2016-3705Fix available7.5 High
- libndp, canonical ubuntu linux, debian linux +7 more +9 morelibndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor...CVE-2016-3698Fix available8.1 High
- dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of...CVE-2016-4804Fix available6.2 Medium
- gnupg libksba, canonical ubuntu linux, opensuse leap +2 moreLibksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and...CVE-2016-4579Fix available7.5 High
- gnupg libksba, canonical ubuntu linux, opensuse leap +1 more +3 moreOff-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3...CVE-2016-4574Fix available7.5 High
- google chrome, v8, canonical ubuntu linux +3 more +5 moreThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...CVE-2016-1669Fix available8.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreInteger overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain...CVE-2016-0758Fix available7.8 High
- php, canonical ubuntu linux +1 moreThe openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x...CVE-2015-8867Fix available7.5 High
- php, canonical ubuntu linux, opensuse leap +3 more +5 moreext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not...CVE-2015-8866Fix available9.6 Critical
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...CVE-2016-4556Fix availableEPSS 23.1%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...CVE-2016-4555Fix availableEPSS 18.2%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moremime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...CVE-2016-4554Fix availableEPSS 38.9%8.6 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...CVE-2016-4553Fix availableEPSS 80.0%8.6 High
- w1.fi hostapd, canonical ubuntu linux, w1.fi wpa supplicant +2 morehostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters...CVE-2016-4476Fix available7.5 High
- qemu, canonical ubuntu linux, citrix xenserver +8 more +10 moreInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...CVE-2016-3712Fix available5.5 Medium
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3717Public exploitFix availableEPSS 20.4%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3716Public exploitFix availableEPSS 11.3%3.3 Low
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders...CVE-2016-3714In KEVPublic exploitFix availableEPSS 97.5%8.4 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +7 more +9 moreDouble free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows...CVE-2016-3951Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4...CVE-2016-3689Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4...CVE-2016-3140Public exploitFix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows...CVE-2016-3138Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moredrivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate...CVE-2016-3137Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4...CVE-2016-3136Public exploitFix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1...CVE-2016-2188Public exploitFix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +2 more +4 moreThe gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows...CVE-2016-2187Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1...CVE-2016-2186Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5...CVE-2016-2185Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, oracle vm server +2 moreThe atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4...CVE-2016-2117Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreMultiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5...CVE-2015-8839Fix available5.1 Medium
- gnupg libksba, canonical ubuntu linux +1 moreThe append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote...CVE-2016-4356Fix available7.5 High
- gnupg libksba, canonical ubuntu linux +1 moreMultiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to...CVE-2016-4355Fix available7.5 High
- gnupg libksba, canonical ubuntu linux +1 moreber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote...CVE-2016-4354Fix available7.5 High
- gnupg libksba, canonical ubuntu linux +1 moreber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which...CVE-2016-4353Fix available7.5 High
- canonical ubuntu-core-launcherThe setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1...CVE-2016-1580Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does...CVE-2016-3672Public exploitFix available7.8 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC...CVE-2016-4002Fix available9.8 Critical
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...CVE-2016-4054Fix availableEPSS 77.6%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...CVE-2016-4053Fix availableEPSS 14.4%3.7 Low
- squid-cache squid, canonical ubuntu linux +1 moreMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...CVE-2016-4052Fix availableEPSS 12.9%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...CVE-2016-4051Fix availableEPSS 18.3%8.8 High
- libgd, canonical ubuntu linux, debian linux +3 more +5 moreInteger signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote...CVE-2016-3074Public exploitFix availableEPSS 35.7%9.8 Critical
- hexchat project hexchat, xchat, xchat gnome +1 more +3 moreThe ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME...CVE-2013-7449Fix available6.5 Medium
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- Show moreLoading…