Skip to contentCanonical Ubuntu Linux vulnerabilities
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to...CVE-2015-5261Fix available7.1 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse +2 moreInteger overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2...CVE-2015-7674Fix available6.8 Medium
- apache httpclient, canonical ubuntu linux, fedoraproject fedora +2 moreDenial of service vulnerability in org.apache.httpcomponents:httpclientCVE-2015-5262Fix availableEPSS 18.8%4.3 Medium
- linuxcontainers lxc, canonical ubuntu linux +1 morelxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...CVE-2015-1335Fix available7.2 High
- apport project apport, canonical ubuntu linux +1 morekernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk...CVE-2015-1338Public exploitFix available7.2 High
- simpestreams project simplestreams, canonical ubuntu linux +1 moreSimple Streams (simplestreams) does not properly verify the GPG signatures of disk image files,...CVE-2015-1337Fix available6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreMultiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap...CVE-2015-7312Fix available4.4 Medium
- rpcbind project rpcbind, canonical ubuntu linux, debian linux +1 more +3 moreUse-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier...CVE-2015-7236Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +1 more +3 moreThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...CVE-2015-5278Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows...CVE-2015-6937Fix available4.9 Medium
- qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +1 more +3 moreThe parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to...CVE-2014-9745Fix available5.0 Medium
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 Low
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of...CVE-2015-5260Fix available7.8 High
- oxide project oxide, canonical ubuntu linux +1 moreThe oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04...CVE-2015-1332Fix available8.8 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not...CVE-2015-6826Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize...CVE-2015-6824Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a...CVE-2015-6820Fix available7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce...CVE-2015-6818Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...CVE-2015-5239Fix available6.5 Medium
- gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 moreGNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic...CVE-2015-0272Fix available5.0 Medium
- gnu gnutls, canonical ubuntu linux +1 moreDouble free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers...CVE-2015-3308Fix available7.5 High
- mediawiki, canonical ubuntu linux +1 moreThe Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25...CVE-2015-6727Fix available5.0 Medium
- libvdpau project libvdpau, canonical ubuntu linux +1 moreThe trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application,...CVE-2015-5200Fix available6.3 Medium
- libvdpau project libvdpau, canonical ubuntu linux +1 moreDirectory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain...CVE-2015-5199Fix available7.2 High
- libvdpau project libvdpau, canonical ubuntu linux +1 morelibvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain...CVE-2015-5198Fix available7.2 High
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDenial-of-service possibility in logout() view by filling session storeCVE-2015-5964Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDjango denial of service via empty session record creationCVE-2015-5963Fix available5.0 Medium
- apple safari, iphone os, canonical ubuntu linux +2 moreThe Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1...CVE-2015-3752Fix available5.0 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3749Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3748Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3747Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3745Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3743Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3741Fix available6.8 Medium
- apple safari, iphone os, itunes +1 more +3 moreWebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x...CVE-2015-3731Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 High
- Show moreLoading…