Skip to contentCanonical Ubuntu vulnerabilities
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- android kernel, debian linux, google android +75 more +77 moreA use-after-free in binder.c allows an elevation of privilege from an application to the Linux...CVE-2019-2215In KEVPublic exploitFix availableEPSS 72.1%7.8 High
- nongnu libntlm, canonical ubuntu linux, debian linux +3 more +5 moreLibntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...CVE-2019-17455Fix available9.8 Critical
- gnu binutils, canonical ubuntu linux, opensuse leap +2 morefind_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...CVE-2019-17450Fix available6.5 Medium
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-17451Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from...CVE-2019-17402Fix available6.5 Medium
- opendev octavia, canonical ubuntu linux +1 moreOpenStack Octavia Amphora-Agent not requiring Client-CertificateCVE-2019-17134Fix available9.1 Critical
- gnome libsoup, canonical ubuntu linux +1 morelibsoup through 2.68.1 has a heap-based buffer over-read because soup_ntlm_parse_challenge() in...CVE-2019-17266Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not...CVE-2019-17133Fix available9.8 Critical
- nlnetlabs unbound, canonical ubuntu linux +1 moreUnbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a...CVE-2019-16866Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel through 5.3.2...CVE-2019-17052Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 morebase_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel...CVE-2019-17055Fix available3.3 Low
- tcpdump, apple mac os x, canonical ubuntu linux +7 more +9 morelmp_print in tcpdump lacks certain boundary checksCVE-2019-15166Public exploitFix available1.6 Low
- tcpdump libpcap, apple ipados, iphone os +8 more +10 moresf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before...CVE-2019-15165Fix available5.3 Medium
- python, canonical ubuntu linux, debian linux +2 moreThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...CVE-2019-16935Fix available6.1 Medium
- exim, canonical ubuntu linux, debian linux +2 more +4 moreExim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019...CVE-2019-16928In KEVFix availableEPSS 41.6%9.8 Critical
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible information disclosure due to improper input validation. This...CVE-2019-9433Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible resource exhaustion due to improper input validation. This could...CVE-2019-9371Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9325Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libexif, there is a possible out of bounds write due to an integer overflow. This could lead...CVE-2019-9278Fix available8.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9232Fix available7.5 High
- netty, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in NettyCVE-2019-16869Fix available7.5 High
- novnc, canonical ubuntu linux, debian linux +1 more +3 moreCross-Site Scripting in @novnc/novncCVE-2017-18635Public exploitFix available6.1 Medium
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not...CVE-2019-16746Public exploitFix availableEPSS 12.7%9.8 Critical
- pam-python project pam-python, canonical ubuntu linux, debian linux +2 morepam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of...CVE-2019-16729Fix available7.8 High
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...CVE-2019-5094Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.CVE-2019-16708Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, opensuse backports +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.CVE-2019-16709Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in...CVE-2019-16710Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.CVE-2019-16711Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in...CVE-2019-16713Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, f5 traffix signaling delivery controller +2 moreIn the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to...CVE-2019-16714Fix available7.5 High
- gnome file-roller, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path...CVE-2019-16680Fix available4.3 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreIn QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...CVE-2019-12068Fix available3.8 Low
- debian linux, linux kernel, canonical ubuntu linux +25 more +27 moreAn out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way...CVE-2019-14821Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published...CVE-2019-16391Fix available6.5 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.CVE-2019-16392Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a...CVE-2019-16393Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password...CVE-2019-16394Public exploitFix available5.3 Medium
- infradead openconnect, canonical ubuntu linux, debian linux +2 more +4 moreprocess_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server...CVE-2019-16239Fix available9.8 Critical
- trusteddomain opendmarc, canonical ubuntu linux, debian linux +1 more +3 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass...CVE-2019-16378Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...CVE-2019-14835Fix available7.2 High
- ibus project ibus, canonical ubuntu linux, oracle zfs storage appliance kit +1 more +3 moreA flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls...CVE-2019-14822Fix available7.1 High
- w1.fi hostapd, canonical ubuntu linux, debian linux +1 more +3 morehostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection...CVE-2019-16275Fix available6.5 Medium
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of a carbons message in module/xep...CVE-2019-16235Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.CVE-2019-16236Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of an MAM message in module/xep...CVE-2019-16237Fix available7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moredrivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the...CVE-2019-16229Fix availableDisputed4.1 Medium
- Show moreLoading…