Skip to contentCanonical Ubuntu Linux vulnerabilities
- libarchive, canonical ubuntu linux, debian linux +3 more +5 moreMultiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in...CVE-2015-8931Fix available7.8 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 morebsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite...CVE-2015-8930Fix available7.5 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0...CVE-2015-8928Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive...CVE-2015-8926Fix available5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 moreThe readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows...CVE-2015-8925Fix available5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 moreThe archive_read_format_tar_read_header function in archive_read_support_format_tar.c in...CVE-2015-8924Fix available5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 moreThe process_extra function in libarchive before 3.2.0 uses the size field and a signed number in...CVE-2015-8923Fix available6.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +3 more +5 moreThe read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0...CVE-2015-8922Fix available5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 moreThe ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers...CVE-2015-8921Fix availableEPSS 12.0%7.5 High
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 moreThe _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0...CVE-2015-8920Fix available5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 moreThe lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive...CVE-2015-8919Fix available7.5 High
- libarchive, canonical ubuntu linux, debian linux +2 morebsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL...CVE-2015-8917Fix available7.5 High
- libarchive, canonical ubuntu linux, debian linux +2 morebsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the...CVE-2015-8916Fix available6.5 Medium
- thekelleys dnsmasq, canonical ubuntu linux +1 moreDnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with...CVE-2015-8899Fix available7.5 High
- dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12...CVE-2015-8872Fix available6.2 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler...CVE-2015-8868Fix available7.8 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise real time extension +2 moredrivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify...CVE-2015-8812Fix availableEPSS 14.5%9.8 Critical
- nettle project nettle, canonical ubuntu linux, opensuse leap +1 more +3 moreThe ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry...CVE-2015-8805Fix available9.8 Critical
- nettle project nettle, canonical ubuntu linux, opensuse leap +1 more +3 morex86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and...CVE-2015-8804Fix available9.8 Critical
- nettle project nettle, canonical ubuntu linux, opensuse leap +1 more +3 moreThe ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry...CVE-2015-8803Fix available9.8 Critical
- ntp, canonical ubuntu linux, debian linux +6 more +8 morentpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of...CVE-2015-7977Fix available5.9 Medium
- ntp, canonical ubuntu linux, freebsd +4 more +6 moreNTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the...CVE-2015-7973Fix available6.5 Medium
- mozilla firefox, network security services, canonical ubuntu linux +2 more +4 moreMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...CVE-2015-7575Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 morearch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during...CVE-2015-7513Fix available6.5 Medium
- gnupg libgcrypt, canonical ubuntu linux, debian linux +2 moreLibgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during...CVE-2015-7511Fix available2.0 Low
- debian linux, xen, canonical ubuntu linux +2 more +4 moreThe PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x...CVE-2015-8552Fix available4.4 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C...CVE-2015-5277Fix available7.2 High
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...CVE-2015-8567Fix available7.7 High
- samba, canonical ubuntu linux, debian linux +2 moreThe samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4...CVE-2015-8467Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return...CVE-2015-7540Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +2 moreThe shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x...CVE-2015-5299Fix availableEPSS 13.6%5.3 Medium
- samba, canonical ubuntu linux, debian linux +2 moreSamba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections...CVE-2015-5296Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +2 morevfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3,...CVE-2015-5252Fix availableEPSS 13.3%7.2 High
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +1 more +3 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0...CVE-2015-8560Fix available7.3 High
- pygments, canonical ubuntu linux +1 moreCommand Injection in PygmentsCVE-2015-8557Fix available9.0 Critical
- sos project sos, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreSoSReport Predictable Tmp File NamesCVE-2015-7529Fix available7.8 High
- git project git, canonical ubuntu linux, opensuse +1 more +3 moreThe (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4...CVE-2015-7545Public exploitFix availableEPSS 18.7%9.8 Critical
- canonical lxcfs, ubuntu linux +1 moreThe do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions,...CVE-2015-13447.2 High
- canonical lxcfs, ubuntu linux +1 moreLXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to...CVE-2015-13424.6 Medium
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...CVE-2015-3196Fix availableEPSS 13.5%4.3 Medium
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 morecrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...CVE-2015-3194Public exploitFix availableEPSS 44.0%7.5 High
- openssl, canonical ubuntu linux, nodejs node.js +2 moreThe Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1...CVE-2015-3193Fix availableEPSS 25.1%7.5 High
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +6 more +8 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...CVE-2015-8327Fix availableEPSS 10.6%7.5 High
- ffmpeg, canonical ubuntu linux +1 moreThe smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3...CVE-2015-8365Fix available6.8 Medium
- ffmpeg, canonical ubuntu linux +1 moreInteger overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2...CVE-2015-8364Fix available6.8 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 Medium
- Show moreLoading…