Skip to contentCanonical Ubuntu vulnerabilities
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreAn off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...CVE-2019-10131Fix available6.5 Medium
- memcached, canonical ubuntu linux +1 moreIn memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru...CVE-2019-11596Fix available7.5 High
- [freedesktop.org] systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreIt was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID...CVE-2019-3843Public exploitFix available4.5 Medium
- [freedesktop.org] systemd, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 moreIt was discovered that a systemd service that uses DynamicUser property can get new privileges...CVE-2019-3844Public exploitFix available4.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...CVE-2019-3900Fix available6.3 Medium
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11506Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11505Fix available8.8 High
- gstreamer, canonical ubuntu linux, debian linux +2 moreGStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a...CVE-2019-9928Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...CVE-2019-3882Fix available4.7 Medium
- wavpack, canonical ubuntu linux, debian linux +1 more +3 moreWavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a ...CVE-2019-11498Fix available6.5 Medium
- graphicsmagick, canonical ubuntu linux, debian linux +3 more +5 morecoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating...CVE-2019-11474Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 High
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +8 more +10 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2697Public exploitFix availableEPSS 11.5%8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-2683Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable...CVE-2019-2632Fix available7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2628Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2627Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2614Fix available4.4 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported...CVE-2019-2592Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2581Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in)...CVE-2019-2566Fix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant...CVE-2019-11487Fix available7.8 High
- canonical ubuntu download manager, ubuntu download manager +1 moreUDM doesn't check for confinement before running post-processing commandsCVE-2016-1579Fix available6.7 Medium
- ubuntu unity-scope-gdrive, canonical ubuntu linux +1 moreunity-scope-gdrive search feature logs search terms to syslogCVE-2015-13432.0 Low
- ubuntu content hub, canonical ubuntu linux +1 moreContent-hub DBUS API doesn't prevent confined apps from passing paths to files without accessCVE-2015-13273.9 Low
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...CVE-2019-11459Fix available5.5 Medium
- tildeslash monit, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflowCVE-2019-11455Fix available8.1 High
- mmonit monit, canonical ubuntu linux, debian linux +1 more +3 moreCross-site scriptingCVE-2019-11454Fix available6.1 Medium
- ffmpeg, canonical ubuntu linux, debian linux +1 more +3 morelibavcodec/hevcdec.c in FFmpeg 4.1.2 mishandles detection of duplicate first slices, which allows...CVE-2019-11338Fix available8.8 High
- python urllib3, canonical ubuntu linux +1 moreImproper Certificate Validation in urllib3CVE-2019-11324Fix available7.5 High
- clusterlabs pacemaker, canonical ubuntu linux, fedoraproject fedora +2 moreA use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result...CVE-2019-3885Fix available3.3 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11035Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11034Fix available4.8 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...CVE-2018-16878Fix available6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...CVE-2018-16877Fix available8.8 High
- freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreFreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...CVE-2019-11235Fix available9.8 Critical
- freeradius, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreFreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ...CVE-2019-11234Fix available9.8 Critical
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- canonical ubuntu server, ubuntu linux +1 moreA security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic...CVE-2019-0816Fix available5.1 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreA flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access...CVE-2019-3887Fix available6.7 Medium
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash...CVE-2019-10903Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was...CVE-2019-10901Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This...CVE-2019-10899Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was...CVE-2019-10896Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash....CVE-2019-10895Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This...CVE-2019-10894Fix available7.5 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function...CVE-2019-11008Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11007Fix available8.1 High
- Show moreLoading…