Skip to contentCanonical Ubuntu Linux vulnerabilities
- qemu, canonical ubuntu linux, debian linux +2 moreInteger overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a...CVE-2017-18043Fix available5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap,...CVE-2018-6405Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13...CVE-2018-6381Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...CVE-2018-1000027Fix availableEPSS 12.9%7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...CVE-2018-1000024Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moredrivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial...CVE-2017-18079Fix available7.8 High
- apple tv, icloud, itunes +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...CVE-2018-4096Fix available8.8 High
- apple tv, icloud, itunes +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...CVE-2018-4088Fix available8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...CVE-2017-7153Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows...CVE-2018-5750Fix available5.5 Medium
- dovecot, canonical ubuntu linux, debian linux +2 moreA flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results...CVE-2017-15132Fix available7.5 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is...CVE-2018-6198Fix available4.7 Medium
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.CVE-2018-6197Fix available7.5 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the...CVE-2018-6196Fix available7.5 High
- haxx curl, canonical ubuntu linux, debian linux +11 more +13 morelibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...CVE-2018-1000007Fix available9.8 Critical
- haxx libcurl, canonical ubuntu linux, debian linux +2 morelibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...CVE-2018-1000005Fix available9.1 Critical
- linux kernel, canonical ubuntu linux +1 morecrypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local...CVE-2017-18075Fix available7.8 High
- gnu mailman, canonical ubuntu linux, debian linux +6 more +8 moreCross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote...CVE-2018-5950Fix available6.1 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of...CVE-2018-5683Fix available6.0 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...CVE-2018-5122Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreThe reader view will display cross-origin content when CORS headers are set to prohibit the...CVE-2018-5119Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...CVE-2018-5118Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...CVE-2018-5117Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...CVE-2018-5116Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreIf an HTTP authentication prompt is triggered by a background network request from a page or...CVE-2018-5115Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...CVE-2018-5114Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...CVE-2018-5113Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreDevelopment Tools panels of an extension are required to load URLs for the panels as relative...CVE-2018-5112Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen the text of a specially formatted URL is dragged to the addressbar from page content, the...CVE-2018-5111Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreAn audio capture session can started under an incorrect origin from the site making the capture...CVE-2018-5109Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA Blob URL can violate origin attribute segregation, allowing it to be accessed from a private...CVE-2018-5108Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe printing process can bypass local access protections to read files available through symlinks...CVE-2018-5107Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreStyle editor traffic in the Developer Tools can be routed through a service worker hosted on a...CVE-2018-5106Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file....CVE-2018-5105Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during font face manipulation when a font face is freed...CVE-2018-5104Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during mouse event handling due to issues with...CVE-2018-5103Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...CVE-2018-5102Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when manipulating floating "first-letter" style elements...CVE-2018-5101Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable"...CVE-2018-5100Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when the widget listener is holding strong references to...CVE-2018-5099Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when form input elements, focus, and selections are...CVE-2018-5098Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during XSL transformations when the source document for...CVE-2018-5097Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...CVE-2018-5095Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called...CVE-2018-5094Fix availableEPSS 15.0%7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing,...CVE-2018-5093Fix availableEPSS 19.4%7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory...CVE-2018-5092Fix available9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...CVE-2018-5091Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory...CVE-2018-5090Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...CVE-2018-5089Fix available9.8 Critical
- nlnet labs unbound, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An...CVE-2017-15105Fix available5.3 Medium
- Show moreLoading…