Skip to contentCanonical Ubuntu vulnerabilities
- qemu, canonical ubuntu linux, debian linux +2 moresd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of...CVE-2020-13253Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....CVE-2020-12829Fix available3.8 Low
- sqlite, apple icloud, ipados +15 more +17 moreSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.CVE-2020-13434Fix available5.5 Medium
- debian netqmail, canonical ubuntu linux, debian linux +2 moreqmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A...CVE-2020-3812Fix available5.5 Medium
- debian netqmail, canonical ubuntu linux, debian linux +2 moreqmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.CVE-2020-3811Fix available7.5 High
- rack project rack, canonical ubuntu linux, debian linux +2 moreDirectory traversal in Rack::Directory app bundled with RackCVE-2020-8161Fix available8.6 High
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has...CVE-2020-13398Public exploitFix available8.3 High
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has...CVE-2020-13397Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has...CVE-2020-13396Fix available7.1 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote...CVE-2020-13113Fix available8.2 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote...CVE-2020-13112Fix available9.1 Critical
- libexif project libexif, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF...CVE-2020-13114Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...CVE-2020-6463Fix available8.8 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moregadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13...CVE-2020-13143Fix available6.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is...CVE-2020-10724Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an...CVE-2020-10723Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...CVE-2020-10722Fix available5.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11526Fix available2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11525Fix available2.2 Low
- freerdp, canonical ubuntu linux, opensuse leap +2 moreUpdated freerdp/remmina packages fix security vulnerabilityCVE-2020-11524Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11523Fix available6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement updateCVE-2020-11522Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security updateCVE-2020-11521Fix available6.6 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a...CVE-2020-0093Fix available5.0 Medium
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV PDF Parsing Denial of Service VulnerabilityCVE-2020-3341Fix available7.5 High
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV ARJ Archive Parsing Denial of Service VulnerabilityCVE-2020-3327Fix available7.5 High
- canonical apport, ubuntu linux +1 moreUnhandled exception in apportCVE-2020-15701Fix available5.5 Medium
- debian apt, canonical ubuntu linux, debian linux +1 more +3 moreMissing input validation in the ar/tar implementations of APT before version 2.1.2 could result...CVE-2020-3810Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreA signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID...CVE-2020-12826Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreCVE-2020-10711 does not affect BellSoft softwareCVE-2020-10711Fix available5.9 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPCVE-2020-11058Fix available2.2 Low
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA...CVE-2020-12783Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreexif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-12767Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has...CVE-2020-12768Fix availableDisputed5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...CVE-2020-12769Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...CVE-2020-12771Fix available5.5 Medium
- iproute2 project iproute2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreiproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.CVE-2019-20795Fix available4.4 Medium
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...CVE-2020-12762Fix available7.8 High
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...CVE-2020-10690Fix available6.5 Medium
- ubports unity8, canonical unity8 (ubuntu) +1 moreMTP service exposed during emergency dialerCVE-2015-79467.3 High
- mozilla thunderbird, canonical ubuntu linux +1 moreBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...CVE-2020-12397Fix available4.3 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPrdp_read_share_control_headerCVE-2020-11049Fix available5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPrdp_read_flow_control_pduCVE-2020-11048Fix available2.2 Low
- Show moreLoading…