Skip to contentCanonical Ubuntu Linux vulnerabilities
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12...CVE-2015-0247Fix available4.6 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 morebdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial...CVE-2014-9675Fix available5.0 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with...CVE-2014-9674Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +7 more +9 moreInteger signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType...CVE-2014-9673Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreArray index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows...CVE-2014-9672Fix available5.8 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 moreOff-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4...CVE-2014-9671Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to...CVE-2014-9669Fix available6.8 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length...CVE-2014-9668Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moresfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without...CVE-2014-9667Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows...CVE-2014-9665Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 morecff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation...CVE-2014-9662Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moretype42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete...CVE-2014-9661Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 High
- freetype, canonical ubuntu linux, fedoraproject fedora +2 more +4 morecff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with...CVE-2014-9659Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreThe tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not...CVE-2014-9656Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...CVE-2015-1212Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe OriginCanAccessServiceWorkers function in content/browser/service_worker...CVE-2015-1211Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...CVE-2015-1210Fix available5.0 Medium
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...CVE-2015-1209Fix available7.5 High
- gnu glibc, canonical ubuntu linux +1 moreThe ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21...CVE-2015-1473Fix available6.4 Medium
- linux kernel, canonical ubuntu linux +1 moreThe IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length...CVE-2015-1465Fix available7.8 High
- redhat libvirt, canonical ubuntu linux, mageia +4 more +6 morelibvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the...CVE-2015-0236Fix available3.5 Low
- gnu patch, canonical ubuntu linux, fedoraproject fedora +2 moreDirectory traversal vulnerability in GNU patch versions which support Git-style patching before 2...CVE-2015-1395Fix availableEPSS 11.3%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreThe em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the...CVE-2015-0239Fix available4.4 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome...CVE-2015-1346Fix available7.5 High
- google chrome, canonical ubuntu linux, chromium +2 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to...CVE-2015-1205Fix available7.5 High
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...CVE-2014-7943Fix available5.0 Medium
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreThe Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a...CVE-2014-7942Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7926Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7923Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height,...CVE-2014-9604Fix available7.5 High
- gnu binutils, canonical ubuntu linux, debian linux +1 more +3 moreThe _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier...CVE-2014-8738Fix available5.0 Medium
- libsndfile project libsndfile, canonical ubuntu linux, debian linux +2 more +4 moreThe sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified...CVE-2014-9496Fix available2.1 Low
- haxx libcurl, canonical ubuntu linux, debian linux +2 moreCRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy,...CVE-2014-8150Fix available4.3 Medium
- canonical ubuntu linux, linuxcontainers cgmanager +1 morecmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows...CVE-2014-1425Fix available2.1 Low
- imagemagick, canonical ubuntu linux, opensuse leap +3 more +5 morecoders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application...CVE-2014-9854Fix available7.5 High
- imagemagick, canonical ubuntu linux, novell leap +7 more +9 moreMemory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service ...CVE-2014-9853Fix available5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 moreImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).CVE-2014-9851Fix available7.5 High
- imagemagick, canonical ubuntu linux, opensuse +5 more +7 moreLogic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource...CVE-2014-9850Fix available7.5 High
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 moreThe png coder in ImageMagick allows remote attackers to cause a denial of service (crash).CVE-2014-9849Fix available7.5 High
- imagemagick, canonical ubuntu linux, opensuse leap +6 more +8 moreMemory leak in ImageMagick allows remote attackers to cause a denial of service (memory...CVE-2014-9848Fix available7.5 High
- imagemagick, canonical ubuntu linux, opensuse +7 more +9 moreThe jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.CVE-2014-9847Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 moreBuffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote...CVE-2014-9846Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, opensuse leap +7 more +9 moreThe ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a...CVE-2014-9845Fix available5.5 Medium
- Show moreLoading…