Skip to contentCanonical Ubuntu Linux vulnerabilities
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support,...CVE-2016-4952Fix available6.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...CVE-2016-4449Fix available7.1 High
- xmlsoft libxml2, apple iphone os, itunes +8 more +10 moreThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...CVE-2016-4447Fix availableEPSS 14.0%7.5 High
- linux kernel, oracle linux, canonical ubuntu linux +2 moreThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not...CVE-2016-4951Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +3 more +5 moreThe get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5...CVE-2016-4913Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +9 more +11 moreUse-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2...CVE-2016-4805Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to...CVE-2016-4794Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +2 morefs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree...CVE-2016-4581Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5...CVE-2016-4580Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moresound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures...CVE-2016-4578Public exploitFix available5.5 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not...CVE-2016-4569Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write...CVE-2016-4565Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows...CVE-2016-4558Public exploitFix available7.0 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does...CVE-2016-4486Public exploitFix available3.3 Low
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +2 more +4 moreThe llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not...CVE-2016-4485Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does...CVE-2016-4482Fix available6.2 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU...CVE-2016-4441Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in...CVE-2016-4439Fix available6.7 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...CVE-2016-1840Fix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1839Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...CVE-2016-1838Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...CVE-2016-1837Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...CVE-2016-1836Fix available5.5 Medium
- apple iphone os, mac os x, canonical ubuntu linux +1 more +3 moreUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...CVE-2016-1835Fix available8.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...CVE-2016-1834Public exploitFix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1833Fix available5.5 Medium
- canonical ubuntu linux, libexpat project libexpat, mcafee policy auditor +1 more +3 moreThe overflow protection in Expat is removed by compilers with certain optimization settings,...CVE-2016-4472Fix availableEPSS 11.9%8.1 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...CVE-2016-0718Fix availableEPSS 13.3%9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...CVE-2016-3705Fix available7.5 High
- libndp, canonical ubuntu linux, debian linux +7 more +9 morelibndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor...CVE-2016-3698Fix available8.1 High
- dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of...CVE-2016-4804Fix available6.2 Medium
- gnupg libksba, canonical ubuntu linux, opensuse leap +2 moreLibksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and...CVE-2016-4579Fix available7.5 High
- gnupg libksba, canonical ubuntu linux, opensuse leap +1 more +3 moreOff-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3...CVE-2016-4574Fix available7.5 High
- google chrome, v8, canonical ubuntu linux +3 more +5 moreThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...CVE-2016-1669Fix available8.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreInteger overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain...CVE-2016-0758Fix available7.8 High
- php, canonical ubuntu linux +1 moreThe openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x...CVE-2015-8867Fix available7.5 High
- php, canonical ubuntu linux, opensuse leap +3 more +5 moreext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not...CVE-2015-8866Fix available9.6 Critical
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...CVE-2016-4556Fix availableEPSS 23.1%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...CVE-2016-4555Fix availableEPSS 18.2%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moremime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...CVE-2016-4554Fix availableEPSS 38.9%8.6 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...CVE-2016-4553Fix availableEPSS 80.0%8.6 High
- w1.fi hostapd, canonical ubuntu linux, w1.fi wpa supplicant +2 morehostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters...CVE-2016-4476Fix available7.5 High
- qemu, canonical ubuntu linux, citrix xenserver +8 more +10 moreInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...CVE-2016-3712Fix available5.5 Medium
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3717Public exploitFix availableEPSS 20.4%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3716Public exploitFix availableEPSS 11.3%3.3 Low
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders...CVE-2016-3714In KEVPublic exploitFix availableEPSS 97.5%8.4 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- Show moreLoading…