Skip to contentCanonical Ubuntu Linux vulnerabilities
- php, canonical ubuntu linux, debian linux +2 moreIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...CVE-2018-7584Public exploitFix availableEPSS 87.3%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local...CVE-2018-7550Fix available8.8 High
- isc dhcp, canonical ubuntu linux, debian linux +5 more +7 moreA malicious client can overflow a reference counter in ISC dhcpdCVE-2018-5733Fix availableEPSS 20.2%5.9 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function...CVE-2017-18211Fix available9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreIn the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL...CVE-2017-18209Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +7 more +9 moreApache Tomcat unauthorized access vulnerabilityCVE-2018-1304Public exploitFix availableEPSS 17.1%5.9 Medium
- postgresql, canonical ubuntu linux, redhat cloudforms +2 moreA flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...CVE-2018-1058Public exploitFix availableEPSS 13.1%8.8 High
- dovecot, canonical ubuntu linux, debian linux +2 moreA denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random...CVE-2017-15130Fix available5.9 Medium
- zsh, canonical ubuntu linux +1 moreIn subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an...CVE-2018-7548Fix available9.8 Critical
- zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreIn params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as...CVE-2018-7549Fix available7.5 High
- clamav, canonical ubuntu linux, debian linux +2 moreClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR...CVE-2018-1000085Fix available5.5 Medium
- zsh, canonical ubuntu linux +1 moreIn utils.c in zsh before 5.4, symlink expansion had a buffer overflow.CVE-2017-18206Fix available9.8 Critical
- zsh, canonical ubuntu linux +1 moreIn zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to...CVE-2016-10714Fix available9.8 Critical
- zsh, canonical ubuntu linux +1 moreIn exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.CVE-2014-10071Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreA NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux...CVE-2018-7492Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local...CVE-2018-7480Fix available7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreA NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3...CVE-2018-7456Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly...CVE-2018-7443Fix available6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreApache Tomcat information exposure vulnerabilityCVE-2018-1305Public exploitFix availableEPSS 14.5%6.5 Medium
- wavpack, canonical ubuntu linux, debian linux +2 moreThe ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote...CVE-2018-7253Fix available7.8 High
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in...CVE-2018-7225Fix available9.8 Critical
- quagga bgpd, quagga, canonical ubuntu linux +1 more +3 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent...CVE-2018-5378EPSS 74.2%7.1 High
- apple cups, canonical ubuntu linux, debian linux +2 moreA localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2...CVE-2017-18190Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free...CVE-2018-7054Fix available9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free...CVE-2018-7053Fix available9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows...CVE-2018-7052Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could...CVE-2018-7051Fix available7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference...CVE-2018-7050Fix available7.5 High
- freetype, canonical ubuntu linux +1 moreAn issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the...CVE-2018-6942Fix available6.5 Medium
- systemd project systemd, canonical ubuntu linux, opensuse leap +2 moresystemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path...CVE-2018-6954Fix available7.8 High
- gnu patch, canonical ubuntu linux +1 moreAn issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated...CVE-2018-6951Fix available7.5 High
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in...CVE-2018-5381Fix availableEPSS 30.2%6.5 Medium
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string...CVE-2018-5380Fix availableEPSS 14.8%4.3 Medium
- quagga bgpd, quagga, canonical ubuntu linux +7 more +9 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing...CVE-2018-5379Fix availableEPSS 38.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...CVE-2018-6927Fix available7.8 High
- libreoffice, canonical ubuntu linux, debian linux +6 more +8 moreLibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via...CVE-2018-6871Public exploitFix availableEPSS 22.8%9.8 Critical
- gdraheim zziplib, canonical ubuntu linux, debian linux +2 moreIn ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the...CVE-2018-6869Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreLinux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient...CVE-2018-1000026Fix available7.7 High
- advancemame advancecomp, amadvance advancecomp:, canonical ubuntu linux +1 more +3 moreAn out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02...CVE-2018-1056Fix available3.3 Low
- python, canonical ubuntu linux +1 morePython 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python...CVE-2018-1000030Public exploitFix available3.6 Low
- exim, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By...CVE-2018-6789In KEVPublic exploitFix availableEPSS 82.1%9.8 Critical
- redhat libvirt, canonical ubuntu linux, debian linux +4 more +6 moreutil/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which...CVE-2018-6764Fix available7.8 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreIn postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...CVE-2018-1053Fix available7.0 High
- wavpack, canonical ubuntu linux, debian linux +2 moreA stack-based buffer over-read in the ParseRiffHeaderConfig function of cli/riff.c file of...CVE-2018-6767Fix available7.8 High
- djangoproject django, canonical ubuntu linux +1 moreDjango vulnerable to information leakage in AuthenticationFormCVE-2018-6188Fix available7.5 High
- uclouvain openjpeg, canonical ubuntu linux, debian linux +1 more +3 moreIn OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...CVE-2018-6616Fix available5.5 Medium
- dlitz pycrypto, canonical ubuntu linux, debian linux +2 morePycrypto generates weak key parametersCVE-2018-6594Fix available7.5 High
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling...CVE-2018-6541Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the...CVE-2018-6540Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a memory alignment error and bus error in the...CVE-2018-6484Fix available6.5 Medium
- Show moreLoading…