Skip to contentCanonical Ubuntu vulnerabilities
- palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreJinja2 sandbox escape via string formattingCVE-2019-10906Fix available8.6 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- apache http server, canonical ubuntu linux, debian linux +2 moreA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...CVE-2019-0196Fix availableEPSS 19.3%5.3 Medium
- nouveau, canonical ubuntu linux, nvidia geforce gtx 745 firmware +15 more +17 moreA remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the...CVE-2018-39797.4 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders...CVE-2019-10649Fix available5.5 Medium
- burrow-wheeler aligner project aligner, canonical ubuntu linux +1 moreBWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the...CVE-2019-10269Fix available9.8 Critical
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow...CVE-2019-7524Fix available8.8 High
- znc, canonical ubuntu linux, fedoraproject fedora +2 moreZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via...CVE-2019-9917Fix available6.5 Medium
- [unknown] ceph, ceph civetweb, canonical ubuntu linux +2 moreA flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL...CVE-2019-38217.5 High
- linux kernel, canonical ubuntu linux, debian linux +6 more +8 moreThe SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem....CVE-2019-3874Fix available5.3 Medium
- xpdfreader xpdf, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec...CVE-2019-10018Fix available5.5 Medium
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- gnu bash, canonical ubuntu linux, debian linux +3 more +5 morerbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...CVE-2019-9924Fix available7.8 High
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +2 more +4 moreA vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL...CVE-2019-3877Fix available5.8 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack...CVE-2019-9903Fix available6.5 Medium
- canonical snapd, ubuntu linux +1 moreSnapd seccomp filter TIOCSTI ioctl bypassCVE-2019-7303Public exploitFix available5.7 Medium
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +8 more +10 moreA vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse...CVE-2019-3878Fix available8.1 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5798Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 moreAn issue where a provided address with access_ok() is not checked was discovered in...CVE-2018-20669Fix available7.8 High
- bestpractical request tracker, canonical ubuntu linux, debian linux +1 more +3 moreThe email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of...CVE-2018-18898Fix available7.5 High
- [unknown] libsndfile, canonical ubuntu linux, debian linux +2 moreIt was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a...CVE-2019-3832Fix available3.3 Low
- ffmpeg, canonical ubuntu linux +1 moreA denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...CVE-2019-9721Fix available6.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreIn FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the...CVE-2019-9718Fix available6.5 Medium
- xmltooling project xmltooling, canonical ubuntu linux, opensuse leap +2 moreXMLTooling Library Incorrectly Handles Some ExceptionsCVE-2019-9628Fix available7.5 High
- libofx project libofx, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function...CVE-2019-9656Fix available8.8 High
- php, canonical ubuntu linux, opensuse leap +2 more** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3....CVE-2019-9675Fix availableDisputed8.1 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9641Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9640Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9639Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9638Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...CVE-2019-9637Fix available7.5 High
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.CVE-2019-7175Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreIn the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap...CVE-2019-9213Public exploitFix available5.5 Medium
- android, canonical ubuntu linux, debian linux +2 moreIn binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper...CVE-2019-1999Public exploitFix available7.8 High
- advancemame advancecomp, canonical ubuntu linux, debian linux +1 more +3 moreIn AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering...CVE-2019-9210Fix available7.8 High
- wireshark, canonical ubuntu linux, debian linux +1 more +3 moreIn Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash...CVE-2019-9209Fix available5.5 Medium
- gnu glibc, canonical ubuntu linux, mcafee web gateway +6 more +8 moreIn the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has...CVE-2019-9169Fix available9.8 Critical
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreA heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0...CVE-2019-9200Fix available8.8 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- samba, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way an LDAP search expression could crash the shared LDAP server process...CVE-2019-3824Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 moreIn the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT...CVE-2019-9162Public exploitFix available7.8 High
- gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 moreAn issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in...CVE-2019-9077Fix available7.8 High
- gnu binutils, canonical ubuntu linux, f5 big-ip access policy manager +15 more +17 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-9075Fix available7.8 High
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-9074Fix available5.5 Medium
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-9073Fix available5.5 Medium
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack...CVE-2019-9071Fix available5.5 Medium
- Show moreLoading…