Skip to contentCanonical Ubuntu Linux vulnerabilities
- gnome eye of gnome, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreEye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...CVE-2016-6855Public exploitFix availableEPSS 18.4%7.5 High
- gnupg, gnupg libgcrypt, canonical ubuntu linux +1 more +3 moreThe mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6...CVE-2016-6313Fix available5.3 Medium
- fontconfig project fontconfig, canonical ubuntu linux, debian linux +1 more +3 morefontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary...CVE-2016-5384Fix available7.8 High
- haxx libcurl, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...CVE-2016-5421Fix available8.1 High
- nettle project nettle, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys...CVE-2016-6489Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...CVE-2016-5403Fix available5.5 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse leap +1 more +3 moreThe OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a...CVE-2016-6352Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP...CVE-2016-6351Fix available6.7 Medium
- perl, canonical ubuntu linux, debian linux +2 more +4 moreThe XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a...CVE-2016-6185Fix available7.8 High
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- canonical ubuntu linux, ecryptfs ecryptfs-utils +1 moreecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from...CVE-2015-8946Fix available3.3 Low
- gnu libidn, canonical ubuntu linux, opensuse leap +1 more +3 moreidn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by...CVE-2016-6262Fix available7.5 High
- gnu libidn, canonical ubuntu linux, opensuse leap +2 moreThe idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent...CVE-2016-6261Fix available7.5 High
- mariadb, oracle mysql, canonical ubuntu linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-5440Fix available4.9 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-5439Fix available4.9 Medium
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3615Fix available5.3 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-3614Fix available5.3 Medium
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3521Fix availableEPSS 10.4%6.5 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-3501Fix available6.5 Medium
- oracle mysql, canonical ubuntu linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote...CVE-2016-3486Fix available6.5 Medium
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3477Fix available8.1 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- canonical ubuntu linux, kde karchives +1 moreDirectory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows...CVE-2016-6232Fix available7.5 High
- canonical ubuntu linux, ecryptfs ecryptfs-utils +1 moreecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating...CVE-2016-6224Fix available3.3 Low
- imagemagick, canonical ubuntu linux, opensuse +6 more +8 moreMemory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote...CVE-2014-9842Fix available7.5 High
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreThe gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2...CVE-2016-6128Fix available7.5 High
- libreoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute...CVE-2016-4324Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid...CVE-2016-5829Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on...CVE-2016-5828Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +2 moreThe IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel...CVE-2016-4998Public exploitFix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter...CVE-2016-4997Public exploitFix available7.8 High
- pidgin, canonical ubuntu linux, debian linux +2 moreA directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted...CVE-2016-4323Fix available3.7 Low
- apache commons fileupload, tomcat, canonical ubuntu linux +3 more +5 moreHigh severity vulnerability that affects commons-fileupload:commons-fileuploadCVE-2016-3092Fix availableEPSS 37.2%7.5 High
- pidgin, canonical ubuntu linux, debian linux +2 moreAn information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT...CVE-2016-2380Fix available3.1 Low
- pidgin, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially...CVE-2016-2378Fix available8.1 High
- pidgin, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially...CVE-2016-2377Fix available8.1 High
- pidgin, canonical ubuntu linux, debian linux +2 moreA buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially...CVE-2016-2376Fix available8.1 High
- pidgin, canonical ubuntu linux, debian linux +2 moreAn exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2375Fix available5.3 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreAn exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in...CVE-2016-2374Fix available8.1 High
- pidgin, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2373Fix available5.9 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreAn information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT...CVE-2016-2372Fix available5.9 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreAn out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2371Fix available8.1 High
- pidgin, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2370Fix available5.9 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreA NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2369Fix available5.9 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreMultiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin....CVE-2016-2368Fix available8.1 High
- pidgin, canonical ubuntu linux, debian linux +2 moreAn information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT...CVE-2016-2367Fix available5.9 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2366Fix available5.9 Medium
- pidgin, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin....CVE-2016-2365Fix available5.9 Medium
- openssl, canonical ubuntu linux, debian linux +3 more +5 moreThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...CVE-2016-2178Fix available5.5 Medium
- google chrome, canonical ubuntu linux, novell suse package hub for suse linux enterprise +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...CVE-2016-1704Fix available8.8 High
- Show moreLoading…