Skip to contentCanonical Ubuntu Linux vulnerabilities
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...CVE-2018-18397Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreLimitations on the URIs allowed to WebExtensions by the browser.windows.create API can be...CVE-2018-18497Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...CVE-2018-18495Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur after deleting a selection element due to a weak...CVE-2018-18492Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2018-12407Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 63. Some...CVE-2018-12406Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 63 and...CVE-2018-12405Fix available9.8 Critical
- gnu binutils, canonical ubuntu linux, netapp vasa provider +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2018-19931Fix available7.8 High
- google chrome, canonical ubuntu linux, debian linux +7 more +9 moreAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...CVE-2018-18356Fix available8.8 High
- google android, linux kernel, canonical ubuntu linux +6 more +8 moreIn sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This...CVE-2018-9568Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related...CVE-2018-19854Fix available4.7 Medium
- wavpack, canonical ubuntu linux, debian linux +2 more +4 moreThe function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0...CVE-2018-19841Fix available5.5 Medium
- wavpack, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows...CVE-2018-19840Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA...CVE-2018-19824Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +2 moreA flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than...CVE-2018-19788Public exploitFix availableEPSS 11.6%8.8 High
- lxml, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in LXMLCVE-2018-19787Fix available6.1 Medium
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM...CVE-2018-8789Fix available7.5 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +2 moreFreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function...CVE-2018-8788Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...CVE-2018-8787Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...CVE-2018-8786Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux +1 moreFreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function...CVE-2018-8785Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux +1 moreFreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function...CVE-2018-8784Fix available9.8 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid...CVE-2018-18314Fix available9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +6 more +8 morePerl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers...CVE-2018-18313Fix available9.1 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18312Fix availableEPSS 12.8%9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18311Fix availableEPSS 11.7%9.8 Critical
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreSamba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of...CVE-2018-16851Fix available6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreSamba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial...CVE-2018-16841Fix available5.7 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4...CVE-2018-14629Fix available6.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the...CVE-2018-195437.8 High
- jasper project jasper, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function...CVE-2018-19542Fix available6.5 Medium
- jasper project jasper, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900...CVE-2018-195418.8 High
- debian linux, linux kernel, [unknown] kernel: +2 more +4 moreA security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an...CVE-2018-16862Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...CVE-2018-19518Public exploitFix availableEPSS 96.1%7.5 High
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a...CVE-2018-19535Fix available6.5 Medium
- git-scm git, canonical ubuntu linux +1 moreGit before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '...CVE-2018-19486Fix available9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19477Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...CVE-2018-19476Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19475Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked...CVE-2018-19409Fix available9.8 Critical
- linux kernel, canonical ubuntu linux +1 moreThe vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows...CVE-2018-19407Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 more +4 morehw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...CVE-2018-19364Fix available5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c...CVE-2018-18955Public exploitFix available7.0 High
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...CVE-2018-5407Public exploitFix available4.7 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...CVE-2018-18954Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in...CVE-2018-19210Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 morePoppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from...CVE-2018-19149Fix available6.5 Medium
- Show moreLoading…