Skip to contentCanonical Ubuntu Linux vulnerabilities
- linux kernel, canonical ubuntu linux +1 moreThe compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local...CVE-2018-11508Public exploitFix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows...CVE-2018-11506Fix available7.8 High
- giflib project giflib, sam2p project sam2p, canonical ubuntu linux +1 more +3 moreThe DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later...CVE-2018-11490Fix available8.8 High
- haproxy, canonical ubuntu linux +1 moreIncorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0...CVE-2018-11469Fix available5.9 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11440Fix available8.8 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a...CVE-2018-11412Public exploitFix availableEPSS 15.6%5.9 Medium
- liblouis, canonical ubuntu linux +1 moreAn issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in...CVE-2018-11410Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-2767Fix available3.1 Low
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...CVE-2018-5185Fix available6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...CVE-2018-5184Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....CVE-2018-5170Fix available4.3 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...CVE-2018-5162Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...CVE-2018-5161Fix available4.3 Medium
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- debian linux, kernel drivers, linux kernel +1 more +3 morekernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's...CVE-2018-1108Fix available5.9 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the...CVE-2017-18273Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the...CVE-2017-18271Fix available6.5 Medium
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +8 more +10 moreprocps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.*...CVE-2018-1126Fix available4.8 Medium
- debian linux, procps-ng project procps-ng, [unknown] procps-ng, procps +2 more +4 moreprocps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This...CVE-2018-1125Fix available4.4 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...CVE-2018-1124Public exploitFix available7.3 High
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +1 more +3 moreprocps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer...CVE-2018-1123Public exploitFix available3.9 Low
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +1 more +3 moreprocps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user...CVE-2018-1122Public exploitFix available7.3 High
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file...CVE-2018-1120Public exploitFix available2.8 Low
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014Fix availableEPSS 20.9%9.8 Critical
- ijg libjpeg, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote...CVE-2018-11214Fix available6.5 Medium
- ijg libjpeg, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote...CVE-2018-11213Fix available6.5 Medium
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...CVE-2018-11212Fix available6.5 Medium
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...CVE-2018-1000301Fix available9.1 Critical
- haxx curl, canonical ubuntu linux +1 morecurl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer...CVE-2018-1000300Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has...CVE-2018-10999Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to...CVE-2018-10998Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a text string that happens to be a filename in the operating system's native format is dragged...CVE-2018-5182Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a...CVE-2018-5181Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur during WebGL operations. While this results in a...CVE-2018-5180Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability exists in XSLT during number formatting where a negative buffer size may be...CVE-2018-5177Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...CVE-2018-5176Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...CVE-2018-5175Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...CVE-2018-5173Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...CVE-2018-5172Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...CVE-2018-5169Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...CVE-2018-5167Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...CVE-2018-5166Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...CVE-2018-5164Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a malicious attacker has used another vulnerability to gain full control over a content...CVE-2018-5163Fix available8.1 High
- mozilla firefox, canonical ubuntu linux +1 moreWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...CVE-2018-5160Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf websocket data is sent with mixed text and binary in a single message, the binary data can be...CVE-2018-5153Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...CVE-2018-5152Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...CVE-2018-5151Fix available9.8 Critical
- Show moreLoading…