Skip to contentCanonical Ubuntu Linux vulnerabilities
- busybox, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote...CVE-2016-2148Fix availableEPSS 27.1%9.8 Critical
- busybox, canonical ubuntu linux, debian linux +2 moreInteger overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to...CVE-2016-2147Fix available7.5 High
- openstack nova-lxd, canonical ubuntu linux +1 moreOpenStack Nova-LXD bypass security restrictionsCVE-2017-5936Fix available7.5 High
- php, canonical ubuntu linux +1 moreIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...CVE-2016-10712Fix available7.5 High
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...CVE-2016-95977.5 High
- libical project libical, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 morelibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...CVE-2016-5824Fix available5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- oracle mysql, mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)....CVE-2017-3313Fix available4.7 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +1 more +3 moreOff-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have...CVE-2016-2090Fix available9.8 Critical
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...CVE-2017-5333Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreThe extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access...CVE-2017-5332Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1...CVE-2017-5331Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...CVE-2016-7056Fix available5.5 Medium
- muscle pcsc-lite, canonical ubuntu linux +1 moreUse-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial...CVE-2016-10109Fix available7.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- exim, canonical ubuntu linux, debian linux +2 moreExim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via...CVE-2016-9963Fix available5.9 Medium
- apport project apport, canonical ubuntu linux +1 moreAn issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport...CVE-2016-9950Public exploitFix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreAn issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field...CVE-2016-9949Public exploitFix availableEPSS 17.7%7.8 High
- canonical ubuntu linux, debian advanced package tool +1 moreThe apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu...CVE-2016-1252Public exploitFix available5.9 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 moreNTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting...CVE-2016-7426Fix availableEPSS 12.4%7.5 High
- linux kernel, canonical ubuntu linux +1 moreRace condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to...CVE-2016-8655Public exploitFix availableEPSS 11.1%7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6...CVE-2016-9774Fix available7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0...CVE-2016-9775Fix available7.8 High
- webkitgtk+, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreWebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoSCVE-2016-4761Fix available8.8 High
- mcabber, canonical ubuntu linux, debian linux +2 moreMCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to...CVE-2016-9928Fix available7.4 High
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- linux kernel, canonical ubuntu linux +1 moreThe xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before...CVE-2016-7913Fix available7.8 High
- xmlsoft libxml2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreCVE-2016-9318 does not affect BellSoft softwareCVE-2016-9318Fix available5.5 Medium
- moinmo moinmoin, canonical ubuntu linux, debian linux +2 moreMoinMoin Cross-site Scripting (XSS) vulnerabilityCVE-2016-9119Fix available6.1 Medium
- cryptography.io cryptography, canonical ubuntu linux, fedoraproject fedora +2 moreImproper input validation in cryptographyCVE-2016-9243Fix available7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango DNS Rebinding VulnerabilityCVE-2016-9014Fix available8.1 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango user with hardcoded password created when running tests on OracleCVE-2016-9013Fix available9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...CVE-2016-5195In KEVPublic exploitFix availableEPSS 83.5%7.0 High
- linux kernel, canonical ubuntu linux +1 moreThe arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel...CVE-2016-7425Fix available7.8 High
- systemd project systemd, canonical ubuntu linux +1 moreThe manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause...CVE-2016-7795Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreUse-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel...CVE-2016-7117Fix availableEPSS 23.6%9.8 Critical
- c-ares, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows...CVE-2016-5180Public exploitFix available9.8 Critical
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango CSRF Protection BypassCVE-2016-7401Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreThe format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote...CVE-2016-7045Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreThe unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when...CVE-2016-7044Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...CVE-2016-6306Fix availableEPSS 41.7%5.9 Medium
- file roller project roller, canonical ubuntu linux +1 moreThe _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows...CVE-2016-7162Fix available7.5 High
- Show moreLoading…