Skip to contentCanonical Ubuntu vulnerabilities
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects NokogiriCVE-2019-13118Fix available5.3 Medium
- xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 moreUninitialized read in Nokogiri gemCVE-2019-13117Fix available5.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPSCVE-2019-12781Fix available5.3 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 morehttp.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash...CVE-2019-13114Fix available6.5 Medium
- exiv2, canonical ubuntu linux, fedoraproject fedora +2 moreExiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion...CVE-2019-13113Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 moreA PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an...CVE-2019-13112Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +1 more +3 moreA CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1...CVE-2019-13110Fix available6.5 Medium
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +1 more +3 moremod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as...CVE-2019-13038Fix available6.1 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings...CVE-2019-12979Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.CVE-2019-12976Fix available5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.CVE-2019-12975Fix available5.5 Medium
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-12972Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 morearch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug...CVE-2019-12817Fix available7.0 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- libvirt, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreIt was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients...CVE-2019-10161Fix available8.8 High
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- samba, canonical ubuntu linux +1 moreSamba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial...CVE-2019-12436Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...CVE-2019-11479Fix availableEPSS 91.3%5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreSACK can cause extensive memory use via fragmented resend queueCVE-2019-11478Public exploitFix availableEPSS 94.4%5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segsCVE-2019-11477Public exploitFix availableEPSS 98.7%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreA flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies...CVE-2019-10126Fix available5.9 Medium
- freedesktop dbus, canonical ubuntu linux +1 moredbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in...CVE-2019-12749Fix available7.1 High
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbmCVE-2019-11038Fix available3.1 Low
- twisted, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreTwisted CRLF InjectionCVE-2019-12387Fix available6.1 Medium
- android, canonical ubuntu linux, debian linux +2 moreIn uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to...CVE-2019-2101Fix available5.5 Medium
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...CVE-2019-10160Fix available9.8 Critical
- exim, canonical ubuntu linux, debian linux +1 more +3 moreA flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient...CVE-2019-10149In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- cyrus imap, canonical ubuntu linux, debian linux +5 more +7 moreThe CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows...CVE-2019-11356Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, debian linux +9 more +11 moreA flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in...CVE-2019-3846Fix available8.0 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreAn issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in...CVE-2019-12614Fix available4.1 Medium
- sqlite, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreSQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...CVE-2019-8457Fix availableEPSS 45.4%9.8 Critical
- gnome glib, canonical ubuntu linux, debian linux +6 more +8 morefile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...CVE-2019-12450Fix available9.8 Critical
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...CVE-2019-12449Fix available5.7 Medium
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...CVE-2019-12447Fix available7.3 High
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreInteger overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote...CVE-2019-5827Fix available8.8 High
- wireshark, canonical ubuntu linux, debian linux +13 more +15 moreIn Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could...CVE-2019-12295Fix available7.5 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...CVE-2019-12221Fix available6.5 Medium
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...CVE-2019-12216Fix available6.5 Medium
- freeimage project freeimage, canonical ubuntu linux, debian linux +1 more +3 moreWhen FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp...CVE-2019-12213Fix available6.5 Medium
- freeimage project freeimage, canonical ubuntu linux +1 moreWhen FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF...CVE-2019-12211Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 morefs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in...CVE-2019-11833Fix available5.5 Medium
- sqlite, sqlite sqlite3, canonical ubuntu linux +3 more +5 moreAn exploitable use after free vulnerability exists in the window function functionality of...CVE-2019-5018Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15...CVE-2019-11884Fix available3.3 Low
- google android, canonical ubuntu linux +1 moreIn the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due...CVE-2019-2054Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....CVE-2019-11815Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur...CVE-2019-11810Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...CVE-2018-20836Fix available8.1 High
- artifex ghostscript, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that in ghostscript some privileged operators remained accessible from various...CVE-2019-3839Fix available7.3 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11036Fix available4.8 Medium
- linux kernel, canonical ubuntu linux +1 moreudp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x through 5.0.11 allows...CVE-2019-116839.8 Critical
- Show moreLoading…