Skip to contentCanonical Ubuntu Linux vulnerabilities
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 High
- debian dpkg, canonical ubuntu linux +1 moreOff-by-one error in the extracthalf function in dpkg-deb/extract.c in the dpkg-deb component in...CVE-2015-0860Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- canonical ubuntu linux, nvidia gpu driver +1 moreMultiple integer overflows in the kernel mode driver for the NVIDIA GPU graphics driver R340...CVE-2015-7869Fix available6.6 Medium
- canonical ubuntu linuxThe lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world...CVE-2015-82224.6 Medium
- debian linux, linux kernel, xen +3 more +5 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...CVE-2015-8104Fix available4.7 Medium
- strongswan, canonical ubuntu linux +1 moreThe server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4...CVE-2015-8023Fix available5.0 Medium
- libsndfile project libsndfile, canonical ubuntu linux, opensuse leap +1 more +3 moreThe psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service ...CVE-2014-9756Fix available5.0 Medium
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- debian linux, linux kernel, xen +2 more +4 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...CVE-2015-5307Fix available4.9 Medium
- xmlsoft libxml2, apple iphone os, mac os x +4 more +6 moreThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...CVE-2015-8035Fix available2.6 Low
- busybox, canonical ubuntu linux, debian linux +2 morehuft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer,...CVE-2015-9261Fix available5.5 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 moreThe build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1...CVE-2015-2697Fix available4.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 morelib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate...CVE-2015-2696Fix available7.1 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 morelib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an...CVE-2015-2695Fix available5.0 Medium
- xscreensaver project xscreensaver, canonical ubuntu linux +1 moredriver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency...CVE-2015-8025Fix available2.1 Low
- canonical apport, ubuntu linux +1 moreApport privilege escalation through Python module importsCVE-2015-1341Fix available7.4 High
- libpng, canonical ubuntu linux, debian linux +7 more +9 moreThe png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,...CVE-2015-7981Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +6 more +8 moreThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...CVE-2015-7942Fix available6.8 Medium
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4913Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated...CVE-2015-4895Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4879Fix available4.6 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4870Public exploitFix availableEPSS 30.1%4.0 Medium
- oracle mysql, canonical ubuntu linux, mariadb +2 moreUnspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated...CVE-2015-4866Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, mariadb +7 more +9 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4864Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4861Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4858Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4836Fix available2.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4826Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4819Fix available7.2 High
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated...CVE-2015-4816Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4815Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4802Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4792Fix available1.7 Low
- miniupnp project miniupnpc, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka...CVE-2015-6031Fix available6.8 Medium
- click project click, canonical ubuntu linux +1 moreclick/install.py in click does not require files in package filesystem tarballs to start with ./ ...CVE-2015-8768Fix available9.8 Critical
- optipng project optipng, canonical ubuntu linux +1 moregifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial...CVE-2015-7802Fix available5.5 Medium
- optipng project optipng, canonical ubuntu linux +1 moreUse-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code...CVE-2015-7801Fix available8.8 High
- unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty...CVE-2015-7697Fix available4.3 Medium
- unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over...CVE-2015-7696Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote...CVE-2015-5214Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote...CVE-2015-5213Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the...CVE-2015-5212Fix available6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode...CVE-2015-4551Fix availableEPSS 13.8%4.3 Medium
- audiofile, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File...CVE-2015-7747Fix available8.8 High
- postgresql, canonical ubuntu linux, debian linux +2 moreMultiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10...CVE-2015-5289Fix available6.4 Medium
- Show moreLoading…