Skip to contentCanonical Ubuntu Linux vulnerabilities
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...CVE-2018-12375Fix available8.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +2 moreIn Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have...CVE-2018-16543Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16542Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16541Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...CVE-2018-16540Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16539Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +2 more +4 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-16513Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...CVE-2018-16511Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +2 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the ...CVE-2018-16510Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...CVE-2018-16509Public exploitFix availableEPSS 92.3%7.8 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...CVE-2018-14618Fix availableEPSS 10.7%7.5 High
- zsh, canonical ubuntu linux +1 moreAn issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated,...CVE-2018-13259Fix available9.8 Critical
- zsh, canonical ubuntu linux +1 moreAn issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled,...CVE-2018-0502Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda...CVE-2018-6555Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net...CVE-2018-6554Fix available5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...CVE-2018-16435Fix available5.5 Medium
- gnome glib, canonical ubuntu linux +1 moreGNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in...CVE-2018-16429Fix available7.5 High
- gnome glib, canonical ubuntu linux +1 moreIn GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer...CVE-2018-16428Fix available9.8 Critical
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +2 moreExiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial...CVE-2018-16336Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when...CVE-2018-16323Public exploitFix availableEPSS 48.9%6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17...CVE-2018-16276Fix available7.8 High
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- fig2dev project fig2dev, canonical ubuntu linux +1 moreA buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to...CVE-2018-16140Fix available7.8 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...CVE-2018-15908Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted...CVE-2018-10938Fix available5.9 Medium
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...CVE-2011-2767Fix available9.8 Critical
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2...CVE-2018-15864Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before...CVE-2018-15863Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could...CVE-2018-15862Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could...CVE-2018-15861Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in...CVE-2018-15859Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreUnchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp...CVE-2018-15858Fix available5.5 Medium
- xkbcommon, canonical ubuntu linux, xkbcommon libxkbcommon +2 moreAn invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1...CVE-2018-15857Fix available7.8 High
- xkbcommon, canonical ubuntu linux +1 moreAn infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in...CVE-2018-15856Fix available5.5 Medium
- xkbcommon project xkbcommon, canonical ubuntu linux +1 moreUnchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash ...CVE-2018-15855Fix available5.5 Medium
- xkbcommon project xkbcommon, canonical ubuntu linux +1 moreUnchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash ...CVE-2018-15854Fix available5.5 Medium
- xkbcommon libxkbcommon, xkbcommon, canonical ubuntu linux +2 moreEndless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which...CVE-2018-15853Fix available5.5 Medium
- x.org libx11, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c...CVE-2018-14600Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...CVE-2018-14599Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious...CVE-2018-14598Fix available7.5 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an...CVE-2018-15822Fix available7.5 High
- gnome pango, canonical ubuntu linux +1 morelibpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote...CVE-2018-15120Public exploitFix availableEPSS 11.4%6.5 Medium
- Show moreLoading…