Skip to contentCanonical Ubuntu Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not...CVE-2015-5364Fix available7.8 High
- debian unattended-upgrades, canonical ubuntu linux +1 moreunattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force...CVE-2015-1330Fix available6.8 Medium
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups...CVE-2015-3258Fix available7.5 High
- openstack icehouse, juno, kilo +1 more +3 moreOpenStack Cinder file disclosure in image convertCVE-2015-1851Fix available6.8 Medium
- canonical ubuntu linuxThe simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04,...CVE-2015-1323Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in...CVE-2015-1328Public exploitFix availableEPSS 37.7%7.8 High
- ffmpeg, libav, canonical ubuntu linux +2 moreThe msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg...CVE-2015-3395Fix available6.8 Medium
- linux kernel, canonical ubuntu linux +1 moreThe OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during...CVE-2015-4004Fix available8.5 High
- linux kernel, canonical ubuntu linux, opensuse +2 moredrivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does...CVE-2015-4002Fix available9.0 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate...CVE-2015-4167Fix available4.7 Medium
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...CVE-2015-4106Fix available4.6 Medium
- t1utils project t1utils, canonical ubuntu linux +1 moreBuffer overflow in the set_cs_start function in t1disasm.c in t1utils before 1.39 allows remote...CVE-2015-3905Fix available7.5 High
- ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 moreracoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...CVE-2015-4047Fix available7.8 High
- postgresql, canonical ubuntu linux, debian linux +2 morecontrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x...CVE-2015-3167Fix available7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreThe snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11...CVE-2015-3166Fix available9.8 Critical
- postgresql, apple mac os x server, canonical ubuntu linux +1 more +3 moreDouble free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11,...CVE-2015-3165Fix available4.3 Medium
- canonical ubuntu linuxRace condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14...CVE-2015-1325Public exploitFix available7.0 High
- canonical ubuntu linuxApport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged...CVE-2015-1324Fix available7.8 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not...CVE-2015-1872Fix available6.8 Medium
- wouter verhelst nbd, canonical ubuntu linux +1 morenbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals,...CVE-2015-0847Fix available7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +3 more +5 moreBuffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library ...CVE-2015-1781Fix available6.8 Medium
- libssh, canonical ubuntu linux, debian linux +1 more +3 moreThe (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh...CVE-2015-3146Fix available7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +2 more +4 moreThe _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option...CVE-2015-3451Fix available5.0 Medium
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to...CVE-2015-1250Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreUse-after-free vulnerability in the MutationObserver::disconnect function in core/dom...CVE-2015-1243Fix available7.5 High
- ubuntu network-manager, canonical ubuntu linux +1 moreDirectory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before...CVE-2015-1322Fix available4.6 Medium
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows...CVE-2015-1321Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 moreThe HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4...CVE-2015-1774Fix available6.8 Medium
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement...CVE-2015-3415Fix available7.5 High
- sqlite, apple mac os x, watchos +3 more +5 moreThe sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle...CVE-2015-3416Fix available7.5 High
- sqlite, apple mac os x, watchos +3 more +5 moreSQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which...CVE-2015-3414Fix available7.5 High
- canonical ubuntu linux, module-signature project module-signature +1 moreUntrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain...CVE-2015-3409Fix available7.2 High
- canonical ubuntu linux, module-signature project module-signature +1 moreModule::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a...CVE-2015-3408Fix available10.0 High
- canonical ubuntu linux, module-signature project module-signature +1 moreModule::Signature before 0.74 allows remote attackers to bypass signature verification for files...CVE-2015-3407Fix available5.0 Medium
- canonical ubuntu linux, module-signature project module-signature +1 moreThe PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the...CVE-2015-3406Fix available7.5 High
- haxx curl, libcurl, apple mac os x +6 more +8 moreThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...CVE-2015-3145Fix availableEPSS 30.5%7.5 High
- haxx curl, libcurl, canonical ubuntu linux +2 more +4 moreThe fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate...CVE-2015-3144Fix availableEPSS 10.5%9.0 High
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...CVE-2015-1863Fix available5.8 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome...CVE-2015-3333Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to...CVE-2015-1249Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreThe URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42...CVE-2015-1244Fix available5.0 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 moreThe ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4...CVE-2015-1242Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreGoogle Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation...CVE-2015-1241Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moregpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0...CVE-2015-1240Fix available5.0 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moreSkia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of...CVE-2015-1238Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content...CVE-2015-1237Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +2 moreThe MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode...CVE-2015-1236Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +2 moreThe ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in...CVE-2015-1235Fix available5.0 Medium
- openstack swift, canonical ubuntu linux +1 moreOpenStack Swift Unauthorized delete of versioned Swift objectCVE-2015-1856Fix available5.5 Medium
- openstack keystonemiddleware, python-keystoneclient, canonical ubuntu linux +2 moreOpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacksCVE-2015-1852Fix available4.3 Medium
- Show moreLoading…