Skip to contentCanonical Ubuntu Linux vulnerabilities
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- linux kernel, canonical ubuntu linux +1 moreThe connector layer in the Linux kernel before 2.6.31.5 does not require the CAP_SYS_ADMIN...CVE-2009-37257.2 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +11 more +13 moreMultiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to...CVE-2009-3547Public exploitFix available7.0 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 morenet/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial...CVE-2009-3621Public exploit5.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreThe ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly...CVE-2009-36207.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 morearch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not...CVE-2009-29102.1 Low
- linux kernel, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2...CVE-2009-36122.1 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x...CVE-2009-32282.1 Low
- samba, canonical ubuntu linux +1 moresmbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows...CVE-2009-2906Fix available4.0 Medium
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 moreThe get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces...CVE-2009-32385.5 Medium
- canonical ubuntu linuxpam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly...CVE-2009-3232Fix available9.3 High
- postgresql, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...CVE-2009-32316.8 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise debuginfo +3 more +5 moreMemory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x...CVE-2009-29037.1 High
- apple iphone os, canonical ubuntu linux +1 moreThe WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod...CVE-2009-27975.0 Medium
- linux kernel, canonical ubuntu linux +1 moreThe Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname...CVE-2009-3002Public exploit4.9 Medium
- linux kernel, canonical ubuntu linux +1 moreThe llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does...CVE-2009-3001Public exploit4.9 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c...CVE-2009-2698Public exploit7.8 High
- webdav neon, apple mac os x, canonical ubuntu linux +1 more +3 moreneon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\0' character in...CVE-2009-2474Fix available5.8 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear...CVE-2009-28485.9 Medium
- xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 Medium
- apache xerces2 java, oracle jdk, canonical ubuntu linux +6 more +8 moreDenial of service in Apache Xerces2CVE-2009-2625Fix availableEPSS 30.4%5.0 Medium
- mozilla firefox, network security services, seamonkey +6 more +8 moreMozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before...CVE-2009-2408Fix available5.9 Medium
- openexr, apple mac os x, canonical ubuntu linux +3 more +5 moreThe decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1...CVE-2009-1721Fix available6.8 Medium
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion...CVE-2009-1891Fix availableEPSS 17.1%7.1 High
- apache http server, canonical ubuntu linux, debian linux +6 more +8 moreThe stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP...CVE-2009-1890Fix availableEPSS 16.2%7.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when...CVE-2009-2287Fix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting...CVE-2009-18957.2 High
- samba, canonical ubuntu linux, debian linux +2 moreThe acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x...CVE-2009-1888Fix available5.8 Medium
- apple iphone os, safari, canonical ubuntu linux +1 more +3 moreThe XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2...CVE-2009-1699Public exploitEPSS 32.8%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...CVE-2009-1961Public exploit4.7 Medium
- apache apr-util, http server, canonical ubuntu linux +2 moreOff-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big...CVE-2009-1956Fix availableEPSS 12.0%6.4 Medium
- openssl, canonical ubuntu linux +1 moreThe dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2...CVE-2009-1387Fix availableEPSS 10.3%5.0 Medium
- openssl, canonical ubuntu linux +1 moressl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL...CVE-2009-1386Public exploitFix availableEPSS 80.1%5.0 Medium
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...CVE-2009-1955Public exploitFix availableEPSS 53.0%7.5 High
- apple cups, mac os x, mac os x server +4 more +6 moreThe ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize...CVE-2009-0949Public exploitFix availableEPSS 19.6%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreMultiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote...CVE-2009-16337.1 High
- openssl, canonical ubuntu linux +1 moreMultiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in...CVE-2009-1378Fix availableEPSS 12.7%5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel...CVE-2009-16304.4 Medium
- apache http server, canonical ubuntu linux +1 moremod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote...CVE-2009-1191Fix availableEPSS 12.4%5.0 Medium
- freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...CVE-2009-0946Fix available7.5 High
- udev project udev, canonical ubuntu linux, debian linux +5 more +7 moreBuffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1...CVE-2009-11862.1 Low
- udev project udev, canonical ubuntu linux, debian linux +6 more +8 moreudev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which...CVE-2009-1185Public exploitFix availableEPSS 80.5%7.2 High
- mit kerberos 5, apple mac os x, canonical ubuntu linux +6 more +8 moreThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...CVE-2009-0846Fix available10.0 High
- clamav, canonical ubuntu linux, debian linux +2 morelibclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service ...CVE-2009-1270Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in...CVE-2009-12424.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 morenfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...CVE-2009-10724.9 Medium
- gstreamer, canonical ubuntu linux +1 moreInteger overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in...CVE-2009-0586Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform...CVE-2009-08343.6 Low
- ffmpeg, canonical ubuntu linux, debian linux +1 more +3 moreInteger signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before...CVE-2009-0385Fix available9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2,...CVE-2009-03224.9 Medium
- Show moreLoading…