Skip to contentCanonical Ubuntu vulnerabilities
- gpac, canonical ubuntu linux, debian linux +2 moreIn GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a...CVE-2018-20760Fix available7.8 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- dovecot, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client...CVE-2019-3814Fix available7.7 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.CVE-2019-7398Fix available7.5 High
- graphicsmagick, imagemagick, canonical ubuntu linux +2 more +4 moreIn ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in...CVE-2019-7397Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.CVE-2019-7396Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.CVE-2019-7395Fix available7.5 High
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...CVE-2019-1000020Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...CVE-2019-1000019Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...CVE-2019-7310Fix available7.8 High
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of environment variables passed to rsync can bypass the restrictions...CVE-2019-3464Fix available9.8 Critical
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by...CVE-2019-3463Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 morekernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds...CVE-2019-7308Fix available5.6 Medium
- linux kernel, canonical ubuntu linux +1 moreIn change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local...CVE-2017-18360Fix available5.5 Medium
- pizzashack rssh, canonical ubuntu linux, debian linux +1 more +3 morerssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a...CVE-2019-1000018Fix available7.8 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreLibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver...CVE-2018-20750Fix available9.8 Critical
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreLibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver...CVE-2018-20749Fix available9.8 Critical
- canonical ubuntu linux, debian linux, libvnc project libvncserver +6 more +8 moreLibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient...CVE-2018-20748Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is...CVE-2018-18504Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreWhen JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash...CVE-2018-18503Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 64. Some...CVE-2018-18502Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +9 more +11 moreIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...CVE-2018-17189Fix availableEPSS 19.4%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +3 more +5 moreIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...CVE-2018-17199Fix availableEPSS 20.0%7.5 High
- linux kernel, canonical ubuntu linux +1 moreA flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A...CVE-2018-16880Fix available5.9 Medium
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...CVE-2019-3813Fix available7.5 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreAn issue was discovered in elfutils 0.175. A segmentation fault can occur in the function...CVE-2019-7150Fix available5.5 Medium
- libgd, canonical ubuntu linux, debian linux +2 moreThe GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in...CVE-2019-6978Fix available9.8 Critical
- libgd, php, canonical ubuntu linux +2 more +4 moregdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in...CVE-2019-6977Public exploitFix availableEPSS 71.5%8.8 High
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.CVE-2019-6778Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid...CVE-2019-3819Fix available4.2 Medium
- lua, canonical ubuntu linux +1 moreLua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might...CVE-2019-6706Public exploitFix availableEPSS 17.4%7.5 High
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...CVE-2019-6116Public exploitFix availableEPSS 41.6%7.8 High
- canonical ubuntu linux, debian advanced package tool, linux +3 more +5 moreIncorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and...CVE-2019-3462Public exploitFix availableEPSS 14.6%8.1 High
- apache subversion, canonical ubuntu linux +1 moreSubversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash...CVE-2018-11803Fix availableEPSS 58.5%7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +10 more +12 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2019-2537Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2534Fix available7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2532Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2531Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2529Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2510Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2481Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2455Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2434Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...CVE-2019-2422Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2420Fix available4.9 Medium
- Show moreLoading…