Skip to contentCanonical Ubuntu vulnerabilities
- canonical cloud-init, ubuntu linux, fedoraproject fedora +2 moresensitive data exposure in cloud-init logsCVE-2023-1786Fix available5.5 Medium
- canonical apport, ubuntu linux +1 morelocal privilege escalation in apport-cliCVE-2023-1326Public exploitFix available7.7 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreA slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless...CVE-2023-1380Fix availableEPSS 16.3%7.1 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid...CVE-2023-0386In KEVPublic exploitFix available7.8 High
- linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function...CVE-2023-1032Fix available4.7 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 moreImportant: kernel security and bug fix updateCVE-2023-0179Public exploitFix available7.8 High
- canonical snapd, ubuntu linux +1 moresnapd Race Condition vulnerabilityCVE-2022-3328Public exploitFix available7.8 High
- linux kernel, canonical ubuntu linux, linux +1 more +3 moreCVE-2022-2602 affecting package kernel for versions less than 5.15.153.1-1CVE-2022-2602Public exploitFix available5.3 Medium
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...CVE-2022-40617Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moremm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an...CVE-2022-41222Fix available7.0 High
- bluez, canonical ubuntu linux, debian linux +2 moreBlueZ before 5.59 allows physically proximate attackers to cause a denial of service because...CVE-2022-39177Fix available8.8 High
- bluez, canonical ubuntu linux, debian linux +2 moreBlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because...CVE-2022-39176Fix available8.8 High
- linux, linux kernel, canonical ubuntu linux +1 more +3 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-2588Public exploitFix available5.3 Medium
- linux kernel, canonical ubuntu linux, linux +3 more +5 moreModerate: kernel-rt security and bug fix updateCVE-2022-2586In KEVPublic exploitFix availableEPSS 10.2%5.3 Medium
- linux kernel, canonical ubuntu linux, linux +2 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-2585Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...CVE-2022-34918Public exploitFix available7.8 High
- canonical cloud-init, ubuntu linux +1 moresensitive data exposure in cloud-init logsCVE-2022-2084Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreModerate: kernel-rt security and bug fix updateCVE-2022-1184Fix available5.5 Medium
- canonical accountsservice, ubuntu linux, linux +2 moreAccountsservice incorrectly drops privilegesCVE-2022-1804Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreApport argument parsing mishandles filename splitting on older kernels resulting in argument...CVE-2022-28658Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreApport does not disable python crash handler before entering chrootCVE-2022-28657Fix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to consume RAM in the Apport processCVE-2022-28656Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to create arbitrary tcp dbus connectionsCVE-2022-28655Fix available7.1 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to fill up apport.logCVE-2022-28654Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 more~/.config/apport/settings parsing is vulnerable to "billion laughs" attackCVE-2022-28652Fix available5.5 Medium
- canonical apport, ubuntu linux +1 moreApport can be tricked into connecting to arbitrary sockets as the root userCVE-2022-1242Fix available7.8 High
- apport, canonical ubuntu linux +1 moreThere is a race condition in the 'replaced executable' detection that, with the correct local...CVE-2021-3899Public exploitFix available7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome gnome-remote-desktop +2 moreUbuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by...CVE-2022-1736Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...CVE-2022-29581Public exploitFix available7.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreUse after Free in tc_new_tfilter allowing for privilege escalation in Linux KernelCVE-2022-1055Fix available8.6 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsCVE-2021-4120Fix available8.2 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- strongswan, canonical ubuntu linux, debian linux +2 more +4 moreIn strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...CVE-2021-45079Fix available9.1 Critical
- advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 moreAIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...CVE-2021-45417Fix available7.8 High
- cisco clamav, canonical ubuntu linux, debian linux +2 moreClam AntiVirus (ClamAV) Denial of Service VulnerabilityCVE-2022-20698Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization...CVE-2021-4093Fix available8.8 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- canonical accountsservice, ubuntu linux +1 moreFree of static data in accountsserviceCVE-2021-3939Fix available7.8 High
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...CVE-2020-25722Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- Show moreLoading…