Skip to contentCanonical Ubuntu Linux vulnerabilities
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +7 more +9 moreDouble free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows...CVE-2016-3951Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe ims_pcu_parse_cdc_data function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4...CVE-2016-3689Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4...CVE-2016-3140Public exploitFix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows...CVE-2016-3138Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moredrivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate...CVE-2016-3137Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4...CVE-2016-3136Public exploitFix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1...CVE-2016-2188Public exploitFix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +2 more +4 moreThe gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows...CVE-2016-2187Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1...CVE-2016-2186Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5...CVE-2016-2185Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, oracle vm server +2 moreThe atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4...CVE-2016-2117Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreMultiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5...CVE-2015-8839Fix available5.1 Medium
- gnupg libksba, canonical ubuntu linux +1 moreThe append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote...CVE-2016-4356Fix available7.5 High
- gnupg libksba, canonical ubuntu linux +1 moreMultiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to...CVE-2016-4355Fix available7.5 High
- gnupg libksba, canonical ubuntu linux +1 moreber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote...CVE-2016-4354Fix available7.5 High
- gnupg libksba, canonical ubuntu linux +1 moreber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which...CVE-2016-4353Fix available7.5 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does...CVE-2016-3672Public exploitFix available7.8 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC...CVE-2016-4002Fix available9.8 Critical
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...CVE-2016-4054Fix availableEPSS 77.6%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...CVE-2016-4053Fix availableEPSS 14.4%3.7 Low
- squid-cache squid, canonical ubuntu linux +1 moreMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...CVE-2016-4052Fix availableEPSS 12.9%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...CVE-2016-4051Fix availableEPSS 18.3%8.8 High
- libgd, canonical ubuntu linux, debian linux +3 more +5 moreInteger signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote...CVE-2016-3074Public exploitFix availableEPSS 35.7%9.8 Critical
- hexchat project hexchat, xchat, xchat gnome +1 more +3 moreThe ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME...CVE-2013-7449Fix available6.5 Medium
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...CVE-2016-4037Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5...CVE-2016-3955Public exploitFix availableEPSS 25.3%9.8 Critical
- mariadb, oracle mysql, canonical ubuntu linux +7 more +9 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB...CVE-2016-0668Fix available4.1 Medium
- oracle mysql, canonical ubuntu linux, redhat enterprise linux +2 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local...CVE-2016-0665Fix available5.5 Medium
- oracle mysql, canonical ubuntu linux, redhat enterprise linux +2 moreUnspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local...CVE-2016-0661Fix available4.7 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0642Fix available4.7 Medium
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in Oxide allows remote attackers to cause a denial of service ...CVE-2016-1578Fix available9.8 Critical
- videolan vlc media player, canonical ubuntu linux +1 moreBuffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player...CVE-2016-3941Fix available5.5 Medium
- xen, canonical ubuntu linux +1 moreXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV...CVE-2016-3961Fix available5.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...CVE-2016-1659Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...CVE-2016-1655Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...CVE-2016-1654Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...CVE-2016-1653Fix available8.8 High
- openbsd openssh, canonical ubuntu core, ubuntu linux +2 more +4 moreThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...CVE-2015-8325Fix available7.8 High
- redhat libvirt, canonical ubuntu linux +1 moreThe virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users...CVE-2015-5247Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- gnu libtasn1, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used...CVE-2016-4008Fix availableEPSS 29.4%5.9 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when...CVE-2016-4001Fix available8.6 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreDenial of service or RCE from libxml2 and libxsltCVE-2015-8806Fix available7.5 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects...CVE-2016-3156Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the...CVE-2016-2184Public exploitFix available4.6 Medium
- xen, canonical ubuntu linux +1 moreThe __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly...CVE-2016-3157Fix available7.8 High
- samba, canonical ubuntu linux, debian linux +2 moreThe MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before...CVE-2016-2118Public exploitFix availableEPSS 37.2%7.5 High
- Show moreLoading…