Skip to contentCanonical Ubuntu vulnerabilities
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of...CVE-2017-14175Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an...CVE-2017-14174Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might...CVE-2017-14173Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of...CVE-2017-14172Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +2 morelibarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer...CVE-2017-14166Fix available6.5 Medium
- canonical bazaar, ubuntu linux, debian linux +2 moreBazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostnameCVE-2017-14176Fix available8.8 High
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreDouble free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote...CVE-2017-6362Fix available7.5 High
- imagemagick, canonical ubuntu linux +1 moreThe ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause...CVE-2017-12693Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to...CVE-2017-12692Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause...CVE-2017-12691Fix available6.5 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +6 more +8 moreRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...CVE-2017-14064Fix available9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function...CVE-2017-14060Fix available6.5 Medium
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems has Origin Validation Error vulnerabilityCVE-2017-0902Fix available8.1 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems may allow a maliciously crafted gem to overwrite filesCVE-2017-0901Public exploitFix availableEPSS 29.4%7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an...CVE-2017-13769Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreNull Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick...CVE-2017-13768Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6...CVE-2017-12877Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c...CVE-2017-13145Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png...CVE-2017-13139Fix available9.8 Critical
- gnu cvs, canonical ubuntu linux, debian linux +2 moreCVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to...CVE-2017-12836Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreIn /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of...CVE-2017-12762Fix available9.8 Critical
- busybox, canonical ubuntu linux, debian linux +2 moreDirectory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows...CVE-2011-5325Fix available7.5 High
- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a reachable assertion in the Internal::TiffReader::visitDirectory function in...CVE-2017-11683Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead...CVE-2017-11591Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreBuffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the...CVE-2017-11473Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF...CVE-2017-11352Fix available6.5 Medium
- jasper project jasper, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreJasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed...CVE-2017-1000050Fix available7.5 High
- canonical ubuntu-imageubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting...CVE-2017-106005.9 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of...CVE-2017-11111Fix available7.8 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +2 morelibgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a...CVE-2017-7526Fix available6.1 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in...CVE-2017-10686Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4...CVE-2017-9985Fix available7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a...CVE-2017-9936Public exploitFix available6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools...CVE-2017-9935Fix available8.8 High
- debian linux, linux kernel, [unknown] kernel: +7 more +9 moreA flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the...CVE-2017-7518Fix available5.5 Medium
- libtiff, canonical ubuntu linux +1 moreIn LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a...CVE-2017-9815Fix available6.5 Medium
- [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 moreAnsible fails to properly mark lookup-plugin results as unsafeCVE-2017-7481Fix available5.3 Medium
- ytnef project ytnef, canonical ubuntu linux +1 moreIn ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a...CVE-2017-9473Fix available5.5 Medium
- ytnef project ytnef, canonical ubuntu linux +1 moreIn ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of...CVE-2017-9471Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.7, a memory leak vulnerability was found in the function...CVE-2017-9404Fix available6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.7, a memory leak vulnerability was found in the function...CVE-2017-9403Fix available6.5 Medium
- canonical ubuntu linux, debian linux, file\ \ +2 moreRace condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for...CVE-2017-6512Fix available5.9 Medium
- strongswan, canonical ubuntu linux, debian linux +2 moreThe gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before...CVE-2017-9022Fix available7.5 High
- exiv2, canonical ubuntu linux +1 moreAn issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect,...CVE-2017-9239Fix available6.5 Medium
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion...CVE-2017-9210Fix available5.5 Medium
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion...CVE-2017-9209Fix available5.5 Medium
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion...CVE-2017-9208Fix available5.5 Medium
- libtiff, canonical ubuntu linux +1 moreIn LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in...CVE-2017-9117Fix available4.0 Medium
- ytnef project ytnef, canonical ubuntu linux +1 moreIn libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect...CVE-2017-9058Fix available9.8 Critical
- git git-shell, canonical ubuntu linux, debian linux +2 more +4 moregit-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x...CVE-2017-8386Public exploitFix availableEPSS 12.4%8.8 High
- Show moreLoading…