Skip to contentCanonical Ubuntu vulnerabilities
- gnu patch, canonical ubuntu linux +1 moreAn issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated...CVE-2018-6951Fix available7.5 High
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in...CVE-2018-5381Fix availableEPSS 30.2%6.5 Medium
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string...CVE-2018-5380Fix availableEPSS 14.8%4.3 Medium
- quagga bgpd, quagga, canonical ubuntu linux +7 more +9 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing...CVE-2018-5379Fix availableEPSS 38.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...CVE-2018-6927Fix available7.8 High
- libreoffice, canonical ubuntu linux, debian linux +6 more +8 moreLibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via...CVE-2018-6871Public exploitFix availableEPSS 22.8%9.8 Critical
- gdraheim zziplib, canonical ubuntu linux, debian linux +2 moreIn ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the...CVE-2018-6869Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreLinux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient...CVE-2018-1000026Fix available7.7 High
- advancemame advancecomp, amadvance advancecomp:, canonical ubuntu linux +1 more +3 moreAn out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02...CVE-2018-1056Fix available3.3 Low
- python, canonical ubuntu linux +1 morePython 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python...CVE-2018-1000030Public exploitFix available3.6 Low
- exim, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By...CVE-2018-6789In KEVPublic exploitFix availableEPSS 82.1%9.8 Critical
- redhat libvirt, canonical ubuntu linux, debian linux +4 more +6 moreutil/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which...CVE-2018-6764Fix available7.8 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreIn postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...CVE-2018-1053Fix available7.0 High
- wavpack, canonical ubuntu linux, debian linux +2 moreA stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of...CVE-2018-6767Fix available7.8 High
- djangoproject django, canonical ubuntu linux +1 moreDjango vulnerable to information leakage in AuthenticationFormCVE-2018-6188Fix available7.5 High
- uclouvain openjpeg, canonical ubuntu linux, debian linux +1 more +3 moreIn OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...CVE-2018-6616Fix available5.5 Medium
- dlitz pycrypto, canonical ubuntu linux, debian linux +2 morePycrypto generates weak key parametersCVE-2018-6594Fix available7.5 High
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling...CVE-2018-6541Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the...CVE-2018-6540Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a memory alignment error and bus error in the...CVE-2018-6484Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreInteger overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a...CVE-2017-18043Fix available5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap,...CVE-2018-6405Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13...CVE-2018-6381Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...CVE-2018-1000027Fix availableEPSS 12.9%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...CVE-2018-1000024Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moredrivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial...CVE-2017-18079Fix available7.8 High
- apple tv, icloud, itunes +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...CVE-2018-4096Fix available8.8 High
- apple tv, icloud, itunes +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...CVE-2018-4088Fix available8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...CVE-2017-7153Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows...CVE-2018-5750Fix available5.5 Medium
- dovecot, canonical ubuntu linux, debian linux +2 moreA flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results...CVE-2017-15132Fix available7.5 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is...CVE-2018-6198Fix available4.7 Medium
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.CVE-2018-6197Fix available7.5 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the...CVE-2018-6196Fix available7.5 High
- haxx curl, canonical ubuntu linux, debian linux +11 more +13 morelibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...CVE-2018-1000007Fix available9.8 Critical
- haxx libcurl, canonical ubuntu linux, debian linux +2 morelibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...CVE-2018-1000005Fix available9.1 Critical
- linux kernel, canonical ubuntu linux +1 morecrypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local...CVE-2017-18075Fix available7.8 High
- gnu mailman, canonical ubuntu linux, debian linux +6 more +8 moreCross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote...CVE-2018-5950Fix available6.1 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of...CVE-2018-5683Fix available6.0 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...CVE-2018-5122Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreThe reader view will display cross-origin content when CORS headers are set to prohibit the...CVE-2018-5119Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...CVE-2018-5118Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...CVE-2018-5117Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...CVE-2018-5116Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreIf an HTTP authentication prompt is triggered by a background network request from a page or...CVE-2018-5115Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...CVE-2018-5114Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...CVE-2018-5113Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreDevelopment Tools panels of an extension are required to load URLs for the panels as relative...CVE-2018-5112Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen the text of a specially formatted URL is dragged to the addressbar from page content, the...CVE-2018-5111Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreAn audio capture session can started under an incorrect origin from the site making the capture...CVE-2018-5109Fix available5.3 Medium
- Show moreLoading…