Skip to contentCanonical Ubuntu Linux vulnerabilities
- uclouvain openjpeg, canonical ubuntu linux, debian linux +2 moreIn OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in...CVE-2017-17480Fix available9.8 Critical
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...CVE-2017-15422Fix available6.5 Medium
- google android, canonical ubuntu linux +1 moreAn elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions:...CVE-2017-13168Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19...CVE-2017-15868Fix available7.8 High
- vim, canonical ubuntu linux, debian linux +2 morefileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary...CVE-2017-17087Fix available5.5 Medium
- x libxcursor, canonical ubuntu linux, debian linux +2 morelibXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows...CVE-2017-16612Fix available7.5 High
- x libxfont, canonical ubuntu linux, debian linux +2 moreIn libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read)...CVE-2017-16611Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a...CVE-2017-15119Fix available5.8 Medium
- samba, canonical ubuntu linux, debian linux +3 more +5 moreSamba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging...CVE-2017-15275Fix availableEPSS 21.4%7.5 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute...CVE-2017-14746Fix available9.8 Critical
- busybox, canonical ubuntu linux, debian linux +3 more +5 moreIn the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete...CVE-2017-16544Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +2 morehw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration,...CVE-2017-16845Fix available10.0 Critical
- apport project apport, canonical ubuntu linux +1 moreApport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace...CVE-2017-14180Fix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreApport before 2.13 does not properly handle crashes originating from a PID namespace allowing...CVE-2017-141797.8 High
- apport project apport, canonical ubuntu linux +1 moreApport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local...CVE-2017-14177Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...CVE-2017-7826Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check...CVE-2017-15115Fix available7.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreThe tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1...CVE-2017-15102Fix available6.3 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...CVE-2017-16642Public exploitFix availableEPSS 26.4%7.5 High
- samba rsync, canonical ubuntu linux, debian linux +2 moreThe receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a...CVE-2017-16548Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the...CVE-2017-16546Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8...CVE-2017-16533Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11...CVE-2017-16532Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows...CVE-2017-16529Fix available6.6 Medium
- linux kernel, canonical ubuntu linux +1 moresound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of...CVE-2017-16528Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moresound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of...CVE-2017-16527Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of...CVE-2017-16526Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel...CVE-2017-16525Fix available6.6 Medium
- systemd project systemd, canonical ubuntu linux +1 moreIn systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC...CVE-2017-15908Fix availableEPSS 23.6%7.5 High
- busybox, canonical ubuntu linux, debian linux +2 moreThe get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an...CVE-2017-15873Fix available5.5 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- apache solr, canonical ubuntu linux, debian linux +1 more +3 moreRemote code execution occurs in Apache SolrCVE-2017-12629Public exploitFix availableEPSS 92.5%9.8 Critical
- git-scm git, canonical ubuntu linux +1 moreGit through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a...CVE-2017-15298Fix available5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of...CVE-2017-15281Fix available8.8 High
- canonical ubuntu linux, cisco systems, inc. simple direct media, debian linux +1 more +3 moreAn exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5...CVE-2017-2888Fix available8.8 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems vulnerable to Deserialization of Untrusted DataCVE-2017-0903Fix availableEPSS 15.9%9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.CVE-2017-15218Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.CVE-2017-15217Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.CVE-2017-15033Fix available7.5 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2017-15032Fix available9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders...CVE-2017-15017Fix available8.8 High
- Show moreLoading…