Skip to contentCanonical Ubuntu Linux vulnerabilities
- imagemagick, canonical ubuntu linux, opensuse +7 more +9 moreThe ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause...CVE-2014-9844Fix available5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 moreThe DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to...CVE-2014-9843Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 moreThe ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have...CVE-2014-9841Fix available9.8 Critical
- pixman, canonical ubuntu linux +1 moreInteger overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6...CVE-2014-9766Fix available9.8 Critical
- xdelta xdelta3, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9...CVE-2014-9765Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel...CVE-2014-9644Fix available2.1 Low
- gnu patch, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreGNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory...CVE-2014-9637Fix available5.5 Medium
- unzip project unzip, canonical ubuntu linux, debian linux +1 more +3 moreunzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and...CVE-2014-9636Fix availableEPSS 11.9%5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +1 more +3 moremod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not...CVE-2014-8109Fix availableEPSS 22.0%4.3 Medium
- libssh, canonical ubuntu linux, debian linux +2 more +4 moreDouble free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x...CVE-2014-8132Fix available5.0 Medium
- libjpeg-turbo, canonical ubuntu linux, fedoraproject fedora +2 morelibjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a...CVE-2014-9092Fix available6.5 Medium
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service ...CVE-2014-9221Fix available5.0 Medium
- redhat libvirt, canonical ubuntu linux, mageia +5 more +7 moreThe (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c...CVE-2014-8136Fix available2.1 Low
- file project file, canonical ubuntu linux, freebsd +1 more +3 moreThe ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of...CVE-2014-8116Fix available5.0 Medium
- firebirdsql firebird, canonical ubuntu linux, debian linux +1 more +3 moreThe xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote...CVE-2014-9323Fix available5.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +9 more +11 moreThe krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap...CVE-2014-5353Fix available3.5 Low
- apache http server, apple mac os x, os x server +1 more +3 moreThe handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP...CVE-2014-3583Fix availableEPSS 10.8%5.0 Medium
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 moreiterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows...CVE-2014-8602Fix availableEPSS 32.2%4.3 Medium
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreMultiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users...CVE-2014-8737Fix available3.6 Low
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and...CVE-2014-8504Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and...CVE-2014-8503Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreHeap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24...CVE-2014-8502Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows...CVE-2014-8501Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote...CVE-2014-8485Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote...CVE-2014-8484Fix available5.0 Medium
- openvpn, canonical ubuntu linux, debian linux +3 more +5 moreOpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote...CVE-2014-8104Fix available6.8 Medium
- libreoffice, canonical ubuntu linux, debian linux +1 more +3 moreLibreOffice before 4.3.5 allows remote attackers to cause a denial of service (invalid write...CVE-2014-9093Fix available7.5 High
- gnupg, gnupg libksba, canonical ubuntu linux +2 more +4 moreInteger underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG,...CVE-2014-9087Fix available7.5 High
- canonical ubuntu linuxmountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount...CVE-2014-14217.2 High
- redhat tcpdump, canonical ubuntu linux, opensuse +1 more +3 moreMultiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in...CVE-2014-8768Public exploitFix availableEPSS 19.8%5.0 Medium
- canonical ubuntu linux, debian linux, freedesktop dbus +1 more +3 moreD-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local...CVE-2014-7824Fix available2.1 Low
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 Medium
- ffmpeg, canonical ubuntu linux +1 moreOff-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a...CVE-2014-8548Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows...CVE-2014-8547Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which...CVE-2014-8544Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks...CVE-2014-8543Fix available7.5 High
- ffmpeg, canonical ubuntu linux, debian linux +2 morelibavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of...CVE-2014-8542Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits...CVE-2014-8541Fix available7.5 High
- haxx libcurl, apple mac os x, canonical ubuntu linux +3 more +5 moreThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...CVE-2014-3707Fix available4.3 Medium
- libreoffice, canonical ubuntu linux, opensuse +3 more +5 moreUse-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4...CVE-2014-3693Fix available7.5 High
- quassel-irc quassel irc, canonical ubuntu linux, debian linux +1 more +3 moreThe blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to...CVE-2014-8483Fix available5.0 Medium
- ruby-lang ruby, canonical ubuntu linux, opensuse +1 more +3 moreThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...CVE-2014-8080Fix available5.0 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreThe GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5...CVE-2014-9709Fix availableEPSS 15.4%5.0 Medium
- canonical ubuntu linux, oracle jdk, jre +1 more +3 moreUnspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity...CVE-2015-0413Fix available1.9 Low
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0412Fix available7.2 High
- oracle jrockit, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5...CVE-2015-0410Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0408Fix available10.0 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0407Fix available5.0 Medium
- Show moreLoading…