Skip to contentCanonical Ubuntu Linux vulnerabilities
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...CVE-2018-10846Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...CVE-2018-10845Fix available5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...CVE-2018-10844Fix available5.9 Medium
- base-files project base-files, canonical ubuntu linux +1 moreInsecure temporary file use in base-filesCVE-2018-6557Fix available7.0 High
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...CVE-2018-10902Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 morearch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls,...CVE-2018-15594Fix available5.5 Medium
- libgd, canonical ubuntu linux, debian linux +2 moreLibgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function...CVE-2018-1000222Fix available8.8 High
- debian advanced package tool, canonical ubuntu linux +1 moreThe mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x...CVE-2018-0501Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c in the Linux kernel...CVE-2018-15572Fix available6.5 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- linux kernel, xen, canonical ubuntu linux +2 moreAn issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux...CVE-2018-15471Fix available7.8 High
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...CVE-2018-10873Fix available8.3 High
- samba, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreA flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1...CVE-2018-1139Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because...CVE-2018-10919Fix available4.3 Medium
- samba, canonical ubuntu linux +1 moreA null pointer dereference flaw was found in the way samba checked database outputs from the LDB...CVE-2018-10918Fix available5.2 Medium
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...CVE-2018-10858Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +48 more +50 moreThe Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Public exploitFix availableEPSS 32.1%7.5 High
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 moreIt was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed...CVE-2018-10925Fix available7.1 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...CVE-2018-10915Fix available8.5 High
- canonical ubuntu linux, debian linux, w1.fi wpa supplicant +2 moreAn issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain...CVE-2018-14526Fix available6.5 Medium
- hewlett packard enterprise hpe moonshot provisioning manager, hp moonshot provisioning manager, canonical ubuntu linux +2 moreA local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning...CVE-2018-70735.5 Medium
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 moreThe lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Fix available3.3 Low
- debian linux, linux kernel, a10networks advanced core operating system +35 more +37 moreLinux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of serviceCVE-2018-5390Fix availableEPSS 71.8%7.5 High
- apple icloud, itunes, safari +3 more +5 moreIn Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1,...CVE-2018-4278Fix available4.3 Medium
- apple icloud, itunes, safari +4 more +6 moreIn Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1,...CVE-2018-4262Fix available8.8 High
- digitalcorpora tcpflow, canonical ubuntu linux +1 moreAn issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an...CVE-2018-14938Fix available9.1 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x...CVE-2018-14883Fix available7.5 High
- google android, linux kernel, canonical ubuntu linux +1 more +3 moreIn the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out...CVE-2018-9363Fix available8.4 High
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5812Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "nikon_coolscan_load_raw()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5811Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5810Fix available8.8 High
- libraw, canonical ubuntu linux +1 moreAn error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5807Fix available8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreexif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x...CVE-2018-14851Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango open redirectCVE-2018-14574Fix availableEPSS 25.5%6.1 Medium
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...CVE-2018-10916Fix available5.3 Medium
- x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause...CVE-2015-9262Fix available9.8 Critical
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5816Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn integer overflow error within the "parse_qt()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2018-5815Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18...CVE-2018-5813Fix available6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 morelibxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service ...CVE-2018-14567Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to...CVE-2018-14734Fix available7.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14682Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad...CVE-2018-14681Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank...CVE-2018-14680Fix available6.5 Medium
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14679Fix available6.5 Medium
- debian linux, linux kernel, xen +1 more +3 moreAn issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The...CVE-2018-14678Fix available7.8 High
- qemu, canonical ubuntu linux, redhat enterprise linux +2 moreA stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before...CVE-2017-15118Public exploitFix availableEPSS 11.9%8.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference...CVE-2018-14617Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer...CVE-2018-14609Fix available5.5 Medium
- Show moreLoading…