Skip to contentCanonical Ubuntu vulnerabilities
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- libslirp project libslirp, canonical ubuntu linux, debian linux +3 more +5 moreImportant: virt:rhel security updateCVE-2020-10756Fix available6.5 Medium
- gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 moreevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...CVE-2020-14928Fix available5.9 Medium
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...CVE-2020-14303Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11,...CVE-2020-10760Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...CVE-2020-12421Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen trying to connect to a STUN server, a race condition could have caused a use-after-free of a...CVE-2020-12420Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreWhen processing callbacks that occurred during window flushing in the parent process, the...CVE-2020-12419Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreManipulating individual parts of a URL object could have caused an out-of-bounds read, leaking...CVE-2020-12418Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...CVE-2020-12417Fix available8.8 High
- libvncserver project libvncserver, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreIt was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...CVE-2017-18922Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...CVE-2020-15393Fix available5.5 Medium
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturnCVE-2020-4067Fix available7.0 High
- canonical ubuntu linux, debian linux, ubuntu linux kernel (aufs filesystem module) +2 moreaufs: improperly managed inode reference counts in the vfsub_dentry_open() methodCVE-2020-11935Fix available4.4 Medium
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...CVE-2020-15358Fix available5.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreUncontrolled Resource Consumption in Apache TomcatCVE-2020-11996Public exploitFix availableEPSS 26.7%7.5 High
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in...CVE-2020-15305Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a...CVE-2020-15306Fix available5.5 Medium
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds reads in PillowCVE-2020-10177Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-11538Fix available8.1 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds reads in PillowCVE-2020-10994Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in PillowCVE-2020-10379Fix available7.8 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-10378Fix available5.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12862Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12863Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreAn out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12864Fix available4.3 Medium
- sane-project sane backends, canonical ubuntu linux, debian linux +1 more +3 moreA heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to...CVE-2020-12865Fix available8.0 High
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to...CVE-2020-12866Fix available5.7 Medium
- gnu mailman, canonical ubuntu linux, debian linux +2 moreGNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private...CVE-2020-15011Fix available4.3 Medium
- nvidia virtual gpu, canonical ubuntu linux, nvidia vgpu software +2 moreNVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which...CVE-2020-5973Fix available4.4 Medium
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Linux GPU Display Driver, all versions, contains a vulnerability in the UVM driver, in...CVE-2020-5967Fix available4.7 Medium
- nvidia gpu display driver, canonical ubuntu linux, nvidia geforce firmware +3 more +5 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process...CVE-2020-5963Fix available7.8 High
- sane-project sane backends, canonical ubuntu linux, opensuse leap +2 moreA heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the...CVE-2020-12861Fix available8.8 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDPCVE-2020-11098Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDPCVE-2020-11097Public exploitFix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPCVE-2020-11096Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDPCVE-2020-11095Fix available3.5 Low
- rack project rack, canonical ubuntu linux, debian linux +2 moreRack allows Percent-encoded cookies to overwrite existing prefixed cookie namesCVE-2020-8184Fix available7.5 High
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...CVE-2020-14954Fix available5.9 Medium
- qemu, canonical ubuntu linux +1 moreoss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.CVE-2020-14415Fix available3.3 Low
- cisco amp for endpoints, clam antivirus, canonical ubuntu linux +3 more +5 moreCisco AMP for Endpoints and ClamAV Privilege Escalation VulnerabilityCVE-2020-3350Fix available5.5 Medium
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL...CVE-2020-14396Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL...CVE-2020-14397Fix available7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes...CVE-2020-14398Fix available7.5 High
- Show moreLoading…