Skip to contentCanonical Ubuntu vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel...CVE-2017-8831Fix available6.4 Medium
- avahi, canonical ubuntu linux +1 moreavahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with...CVE-2017-6519Fix available9.1 Critical
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and...CVE-2017-7980Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote...CVE-2017-7645Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe mm subsystem in the Linux kernel through 3.2 does not properly enforce the...CVE-2017-7889Fix available7.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreelflint.c in elfutils 0.168 does not validate the number of sections and the number of segments,...CVE-2017-7613Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a...CVE-2017-7612Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a...CVE-2017-7611Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial...CVE-2017-7610Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote...CVE-2017-7608Fix available5.5 Medium
- jasper, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreJasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded...CVE-2016-9600Fix available6.5 Medium
- lightdm project lightdm, canonical ubuntu linux +1 moreIn LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local...CVE-2017-7358Public exploitFix available7.3 High
- openstack oslo.middleware, unspecified python-oslo-middleware, canonical ubuntu linux +2 moreoslo.middleware Information Disclosure vulnerabilityCVE-2017-2592Fix available5.9 Medium
- canonical ubuntu linux, debian linux +1 moredmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the...CVE-2017-6964Fix available7.8 High
- apparmor, canonical ubuntu core, ubuntu touch +2 moreAn issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles...CVE-2017-6507Fix available5.9 Medium
- jasper project jasper, canonical ubuntu linux +1 moreThe ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause...CVE-2016-9388Fix available5.5 Medium
- apng2gif project apng2gif, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based...CVE-2017-6960Fix available7.5 High
- canonical ubuntu linuxAn issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS...CVE-2017-6590Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the...CVE-2017-5669Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have...CVE-2017-5897Fix available9.8 Critical
- canonical ubuntu linux, debian linux +1 moreIt was discovered that a programming error in the processing of HTTPS requests in the Apache...CVE-2017-6056Fix available7.5 High
- canonical ubuntu linux, debian linux, libjpeg-turbo +1 more +3 moreThe cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-3616Fix available8.8 High
- busybox, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote...CVE-2016-2148Fix availableEPSS 27.1%9.8 Critical
- busybox, canonical ubuntu linux, debian linux +2 moreInteger overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to...CVE-2016-2147Fix available7.5 High
- openstack nova-lxd, canonical ubuntu linux +1 moreOpenStack Nova-LXD bypass security restrictionsCVE-2017-5936Fix available7.5 High
- php, canonical ubuntu linux +1 moreIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...CVE-2016-10712Fix available7.5 High
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...CVE-2016-95977.5 High
- libical project libical, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 morelibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...CVE-2016-5824Fix available5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- oracle mysql, mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)....CVE-2017-3313Fix available4.7 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +1 more +3 moreOff-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have...CVE-2016-2090Fix available9.8 Critical
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...CVE-2017-5333Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreThe extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access...CVE-2017-5332Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1...CVE-2017-5331Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...CVE-2016-7056Fix available5.5 Medium
- muscle pcsc-lite, canonical ubuntu linux +1 moreUse-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial...CVE-2016-10109Fix available7.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- exim, canonical ubuntu linux, debian linux +2 moreExim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via...CVE-2016-9963Fix available5.9 Medium
- apport project apport, canonical ubuntu linux +1 moreAn issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport...CVE-2016-9950Public exploitFix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreAn issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field...CVE-2016-9949Public exploitFix availableEPSS 17.7%7.8 High
- canonical ubuntu linux, debian advanced package tool +1 moreThe apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu...CVE-2016-1252Public exploitFix available5.9 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 moreNTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting...CVE-2016-7426Fix availableEPSS 12.4%7.5 High
- linux kernel, canonical ubuntu linux +1 moreRace condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to...CVE-2016-8655Public exploitFix availableEPSS 11.1%7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6...CVE-2016-9774Fix available7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0...CVE-2016-9775Fix available7.8 High
- webkitgtk+, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreWebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoSCVE-2016-4761Fix available8.8 High
- mcabber, canonical ubuntu linux, debian linux +2 moreMCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to...CVE-2016-9928Fix available7.4 High
- Show moreLoading…