Skip to contentCanonical Ubuntu Linux vulnerabilities
- php, canonical ubuntu linux, netapp storage automation store +2 moreexif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a...CVE-2018-12882Fix available9.8 Critical
- linux kernel, canonical ubuntu linux +1 moreIn arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used,...CVE-2018-12904Public exploitFix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as...CVE-2018-10853Fix available7.0 High
- gnu binutils, canonical ubuntu linux +1 morefinish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap...CVE-2018-12699Fix available9.8 Critical
- gnu binutils, canonical ubuntu linux +1 moredemangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...CVE-2018-12698Fix available7.5 High
- gnu binutils, canonical ubuntu linux +1 moreA NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in...CVE-2018-12697Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreqmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest...CVE-2018-12617Public exploitFix availableEPSS 24.6%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0...CVE-2018-1000204Fix availableDisputed5.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to...CVE-2018-12600Fix available8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to...CVE-2018-12599Fix available8.8 High
- apache http server, canonical ubuntu linux, netapp cloud backup +2 more +4 moreDoS for HTTP/2 connections by crafted requestsCVE-2018-1333Fix availableEPSS 17.0%7.5 High
- libjpeg-turbo, canonical ubuntu linux, debian linux +2 morelibjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by...CVE-2018-1152Fix available6.5 Medium
- wpewebkit wpe webkit, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreThe getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo...CVE-2018-12293Public exploitFix availableEPSS 10.0%8.8 High
- point-to-point protocol project protocol, canonical ubuntu linux +1 moreImproper input validation together with an integer overflow in the EAP-TLS protocol...CVE-2018-11574Fix available9.8 Critical
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...CVE-2018-3665Fix available5.6 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out...CVE-2018-12265Fix available8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of...CVE-2018-12264Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race...CVE-2018-5814Fix available7.0 High
- isc bind, bind 9, canonical ubuntu linux +2 moreSome versions of BIND can improperly permit recursive query service to unauthorized clientsCVE-2018-5738Fix availableEPSS 11.4%5.3 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption...CVE-2018-12233Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreClient DoS due to large DH parameterCVE-2018-0732Fix availableEPSS 47.0%7.5 High
- file project file, canonical ubuntu linux, opensuse leap +2 moreThe do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to...CVE-2018-10360Fix available6.5 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-12085Fix available8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4246Fix available8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4233Public exploitFix availableEPSS 53.8%8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4232Fix available4.3 Medium
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4222Public exploitFix availableEPSS 10.7%8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4218Public exploitFix available8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4199Fix available8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11...CVE-2018-4190Fix available8.8 High
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...CVE-2018-12020Fix available7.5 High
- perl, apple mac os x, archive\ \ +6 more +8 moreIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...CVE-2018-12015Fix available7.5 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in...CVE-2018-11685Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in...CVE-2018-11684Fix available8.8 High
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in...CVE-2018-11683Fix available8.8 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function...CVE-2018-11656Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function...CVE-2018-11655Fix available6.5 Medium
- bouncycastle legion-of-the-bouncy-castle-java-crytography-api, canonical ubuntu linux, netapp 7-mode transition tool +2 more +4 moreIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validateCVE-2016-1000338Fix available7.5 High
- strongswan, canonical ubuntu linux, debian linux +2 moreIn stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer...CVE-2018-5388Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a...CVE-2018-11625Fix available8.8 High
- graphviz, canonical ubuntu linux, fedoraproject fedora +2 moreNULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the...CVE-2018-10196Fix available5.5 Medium
- liblouis, canonical ubuntu linux, opensuse leap +2 moreLiblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.CVE-2018-11577Fix available8.8 High
- git-scm git, canonical ubuntu linux +1 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...CVE-2018-11233Fix available7.5 High
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1061Fix available6.5 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1060Fix available4.3 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.CVE-2018-11531Fix available9.8 Critical
- git-scm git, canonical ubuntu linux, debian linux +5 more +7 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...CVE-2018-11235Public exploitFix availableEPSS 47.4%7.8 High
- strongswan, canonical ubuntu linux, debian linux +1 more +3 morestrongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a...CVE-2018-10811Fix available7.5 High
- Show moreLoading…