Skip to contentCanonical Ubuntu Linux vulnerabilities
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles...CVE-2017-18233Fix available5.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...CVE-2018-5143Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...CVE-2018-5142Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability in the notifications Push API where notifications can be sent through service...CVE-2018-5141Fix available8.2 High
- mozilla firefox, canonical ubuntu linux +1 moreImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...CVE-2018-5140Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...CVE-2018-5137Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA shared worker created from a "data:" URL in one tab can be shared by another tab with a...CVE-2018-5136Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...CVE-2018-5133Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...CVE-2018-5132Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreUnder certain circumstances the "fetch()" API can return transient local copies of resources that...CVE-2018-5131Fix available5.9 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...CVE-2018-5130Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...CVE-2018-5129Fix available8.6 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...CVE-2018-5128Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...CVE-2018-5127Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...CVE-2018-5126Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...CVE-2018-5125Fix available8.8 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...CVE-2018-1000122Fix available9.1 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...CVE-2018-1000121Fix available7.5 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl FTP path confusion leads to NIL byte out of bounds writeCVE-2018-1000120Fix availableEPSS 11.6%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the...CVE-2018-8087Fix available5.5 Medium
- samba, canonical ubuntu linux, debian linux +2 moreOn a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly...CVE-2018-1057Fix availableEPSS 10.0%8.8 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreAll versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the...CVE-2018-1050Fix available4.3 Medium
- memcached, canonical ubuntu linux, debian linux +1 more +3 morememcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free...CVE-2018-1000127Fix available7.5 High
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...CVE-2018-7858Fix available5.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the ...CVE-2018-5802Fix available8.8 High
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to...CVE-2018-5801Fix available6.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common...CVE-2018-5800Fix available6.5 Medium
- gnu sharutils, canonical ubuntu linux, debian linux +2 moreSharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in...CVE-2018-1000097Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4...CVE-2018-8043Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu...CVE-2018-7995Fix availableDisputed4.7 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd()...CVE-2018-1071Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux...CVE-2018-7755Fix available5.5 Medium
- ntp, canonical ubuntu linux, freebsd +1 more +3 moreBuffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote...CVE-2018-7183Fix availableEPSS 10.2%9.8 Critical
- gpac, canonical ubuntu linux, debian linux +2 moreGPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools...CVE-2018-7752Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local...CVE-2018-7740Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filtersCVE-2018-7537Fix available5.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango denial-of-service possibility in urlize and urlizetrunc template filtersCVE-2018-7536Fix available5.3 Medium
- exempi project exempi, canonical ubuntu linux +1 moreAn issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp...CVE-2018-7731Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is...CVE-2018-7730Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux +1 moreAn issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the...CVE-2018-7729Fix available5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp...CVE-2018-7728Fix available5.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the...CVE-2018-7726Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered...CVE-2018-7725Fix available6.5 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 moreThe protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of...CVE-2018-7185Fix available7.5 High
- ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 morentpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,...CVE-2018-7184Fix available7.5 High
- ntp, canonical ubuntu linux, netapp element software +2 moreThe ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a...CVE-2018-7182Public exploitFix availableEPSS 28.8%7.5 High
- gpac project gpac, canonical ubuntu linux +1 moreGPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia...CVE-2018-1000100Fix available7.8 High
- cisco clamav, canonical ubuntu linux, debian linux +2 moreclamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated,...CVE-2018-0202Public exploitFix available5.5 Medium
- memcached, canonical ubuntu linux, debian linux +1 more +3 moreMemcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network...CVE-2018-1000115Public exploitFix availableEPSS 88.0%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs...CVE-2018-1066Fix available6.5 Medium
- Show moreLoading…