Skip to contentCanonical Ubuntu Linux vulnerabilities
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB...CVE-2016-2115Fix availableEPSS 10.2%5.9 Medium
- samba, canonical ubuntu linux +1 moreThe SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before...CVE-2016-2114Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509...CVE-2016-2113Fix available7.4 High
- samba, canonical ubuntu linux +1 moreThe bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x...CVE-2016-2112Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreThe NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4...CVE-2016-2111Fix available6.3 Medium
- samba, canonical ubuntu linux +1 moreThe NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,...CVE-2016-2110Fix available5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly...CVE-2015-5370Fix availableEPSS 19.1%5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- optipng project optipng, canonical ubuntu linux, debian linux +2 more +4 moreOff-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows...CVE-2016-3982Fix available8.8 High
- optipng project optipng, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6...CVE-2016-3981Fix available7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local...CVE-2016-2858Fix available6.5 Medium
- optipng, canonical ubuntu linux, debian linux +2 more +4 moreThe bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers...CVE-2016-2191Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux +1 moreHeap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in...CVE-2016-3947Fix availableEPSS 14.6%8.2 High
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreStack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C...CVE-2016-3075Fix available7.5 High
- google chrome, v8, canonical ubuntu linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome...CVE-2016-3679Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 moreThe Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome...CVE-2016-1649Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 moreUse-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser...CVE-2016-1647Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...CVE-2016-1646In KEVFix availableEPSS 48.1%8.8 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- debian linux, canonical ubuntu linux +1 morept_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2...CVE-2016-2856Public exploitFix available8.4 High
- linux kernel, canonical ubuntu linux +1 moreInteger overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux...CVE-2016-3135Public exploitFix available7.8 High
- isc dhcp, canonical ubuntu linux, debian linux +2 moreISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number...CVE-2016-2774Fix availableEPSS 73.6%5.9 Medium
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...CVE-2016-1286Fix availableEPSS 60.8%8.6 High
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...CVE-2016-1285Fix availableEPSS 57.8%6.8 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x...CVE-2015-7560Fix availableEPSS 12.9%6.5 Medium
- qemu, canonical ubuntu linux +1 moreThe ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before...CVE-2016-2841Fix available6.0 Medium
- jasper project jasper, canonical ubuntu linux +1 moreMemory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote...CVE-2016-2116Fix available5.7 Medium
- jasper project jasper, canonical ubuntu linux +1 moreDouble free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier...CVE-2016-1577Fix available7.6 High
- perl, canonical ubuntu linux, debian linux +7 more +9 morePerl might allow context-dependent attackers to bypass the taint protection mechanism in a child...CVE-2016-2381Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...CVE-2016-0797Fix availableEPSS 27.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...CVE-2016-0702Public exploitFix available5.1 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Verification of Source of a Communication Channel in Apache TomcatCVE-2016-0763Fix availableEPSS 11.3%6.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Access Control in Apache TomcatCVE-2016-0714Public exploitFix availableEPSS 13.1%8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2016-0706Fix available4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a tokenCVE-2015-5351Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2015-5346Fix availableEPSS 10.6%8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345Fix availableEPSS 18.4%5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5174Fix availableEPSS 12.6%4.3 Medium
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman...CVE-2016-0739Fix available5.9 Medium
- linux kernel, canonical ubuntu core, ubuntu linux +1 more +3 moreThe overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the...CVE-2016-1576Public exploitFix available7.8 High
- linux kernel, canonical ubuntu core, ubuntu linux +1 more +3 moreThe overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX...CVE-2016-1575Public exploitFix available7.8 High
- openssl, canonical ubuntu linux, debian linux +2 more +4 moreDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...CVE-2016-0705Fix availableEPSS 26.3%9.8 Critical
- beanshell, canonical ubuntu linux, debian linux +2 moreImproper Input Validation in BeanShellCVE-2016-2510Fix availableEPSS 70.4%8.1 High
- qemu, canonical ubuntu linux +1 moreThe is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1...CVE-2016-2392Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows...CVE-2016-2391Fix available5.0 Medium
- libreoffice, canonical ubuntu linux +1 moreLibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption)...CVE-2016-0795Fix available7.8 High
- libreoffice, canonical ubuntu linux +1 moreThe lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service ...CVE-2016-0794Fix available7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreThe adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not...CVE-2016-2383Fix available5.5 Medium
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows...CVE-2016-2330Fix available8.8 High
- Show moreLoading…