Skip to contentCanonical Ubuntu vulnerabilities
- zsh, canonical ubuntu linux, debian linux +3 more +5 moreZsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete...CVE-2018-1083Fix available7.8 High
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the...CVE-2017-18254Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify...CVE-2017-18252Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the...CVE-2017-18251Fix available6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- imagemagick, canonical ubuntu linux +1 moreThe ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly...CVE-2018-8960Fix available8.8 High
- rsyslog librelp, canonical ubuntu linux, debian linux +6 more +8 morersyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the...CVE-2018-1000140Public exploitFix available9.8 Critical
- libtiff, canonical ubuntu linux, debian linux +3 more +5 moreIn LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw...CVE-2018-8905Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 morefs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service...CVE-2017-18241Fix available5.5 Medium
- gnome networkmanager, canonical ubuntu linux +1 moreGNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200)...CVE-2018-1000135Fix available7.5 High
- nasm netwide assembler, canonical ubuntu linux +1 moreNetwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in...CVE-2018-8881Fix available7.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIncorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in...CVE-2018-8822Fix available7.8 High
- imagemagick, canonical ubuntu linux +1 moreWriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a...CVE-2018-8804Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...CVE-2018-5146Public exploitFix availableEPSS 11.9%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for...CVE-2018-1068Fix available6.7 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...CVE-2018-5145Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...CVE-2018-5144Fix available7.3 High
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in...CVE-2017-18236Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of...CVE-2017-18234Fix available7.8 High
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles...CVE-2017-18233Fix available5.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...CVE-2018-5143Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...CVE-2018-5142Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability in the notifications Push API where notifications can be sent through service...CVE-2018-5141Fix available8.2 High
- mozilla firefox, canonical ubuntu linux +1 moreImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...CVE-2018-5140Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...CVE-2018-5137Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA shared worker created from a "data:" URL in one tab can be shared by another tab with a...CVE-2018-5136Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...CVE-2018-5133Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...CVE-2018-5132Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreUnder certain circumstances the "fetch()" API can return transient local copies of resources that...CVE-2018-5131Fix available5.9 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...CVE-2018-5130Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...CVE-2018-5129Fix available8.6 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...CVE-2018-5128Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...CVE-2018-5127Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...CVE-2018-5126Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...CVE-2018-5125Fix available8.8 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...CVE-2018-1000122Fix available9.1 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...CVE-2018-1000121Fix available7.5 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl FTP path confusion leads to NIL byte out of bounds writeCVE-2018-1000120Fix availableEPSS 11.6%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the...CVE-2018-8087Fix available5.5 Medium
- samba, canonical ubuntu linux, debian linux +2 moreOn a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly...CVE-2018-1057Fix availableEPSS 10.0%8.8 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreAll versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the...CVE-2018-1050Fix available4.3 Medium
- memcached, canonical ubuntu linux, debian linux +1 more +3 morememcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free...CVE-2018-1000127Fix available7.5 High
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...CVE-2018-7858Fix available5.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the ...CVE-2018-5802Fix available8.8 High
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to...CVE-2018-5801Fix available6.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common...CVE-2018-5800Fix available6.5 Medium
- gnu sharutils, canonical ubuntu linux, debian linux +2 moreSharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in...CVE-2018-1000097Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4...CVE-2018-8043Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu...CVE-2018-7995Fix availableDisputed4.7 Medium
- Show moreLoading…