Skip to contentCanonical Ubuntu Linux vulnerabilities
- canonical ubuntu linux, debian linux, sound exchange project exchange +2 moreAn issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on...CVE-2019-8354Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...CVE-2019-6974Public exploitFix availableEPSS 16.5%8.1 High
- python python-gnupg, canonical ubuntu linux, debian linux +2 more +4 moreImproper Input Validation python-gnupgCVE-2019-6690Public exploitFix available7.5 High
- canonical snapd, ubuntu linux +1 moreLocal privilege escalation via snapd socketCVE-2019-7304Public exploitFix availableEPSS 61.1%8.8 High
- gnome keyring, canonical ubuntu linux, oracle zfs storage appliance kit +2 moreIn pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session...CVE-2018-20781Fix available7.8 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreUncontrolled Memory Consumption in DjangoCVE-2019-6975Fix available7.5 High
- apple icloud, icloud for windows, ios +7 more +9 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...CVE-2019-6215Public exploitFix available8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-6212Fix available8.8 High
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- rdflib project rdflib, canonical ubuntu linux, debian linux +2 moreThe Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load...CVE-2019-7653Fix available9.8 Critical
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreIn elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in...CVE-2019-7665Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +1 more +3 moreAn Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff...CVE-2019-7663Fix available6.5 Medium
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7638Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer...CVE-2019-7637Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7636Fix available8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +3 more +5 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7635Fix available8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7578Fix available8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in...CVE-2019-7577Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7576Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer...CVE-2019-7575Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7574Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7573Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in...CVE-2019-7572Fix available8.8 High
- the gnome projectr gdm, canonical ubuntu linux, gnome display manager +1 more +3 moreA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...CVE-2019-3825Fix available6.3 Medium
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- gnome gnome-shell, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that the gnome-shell lock screen since version 3.15.91 did not properly...CVE-2019-3820Fix available4.8 Medium
- gpac project gpac, canonical ubuntu linux, debian linux +2 moreIn GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a...CVE-2018-20763Fix available7.8 High
- gpac project gpac, canonical ubuntu linux, debian linux +2 moreGPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files...CVE-2018-20762Fix available7.8 High
- gpac project gpac, canonical ubuntu linux, debian linux +2 moreGPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init...CVE-2018-20761Fix available7.8 High
- gpac, canonical ubuntu linux, debian linux +2 moreIn GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a...CVE-2018-20760Fix available7.8 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- dovecot, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client...CVE-2019-3814Fix available7.7 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.CVE-2019-7398Fix available7.5 High
- graphicsmagick, imagemagick, canonical ubuntu linux +2 more +4 moreIn ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in...CVE-2019-7397Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.CVE-2019-7396Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.CVE-2019-7395Fix available7.5 High
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...CVE-2019-1000020Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...CVE-2019-1000019Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...CVE-2019-7310Fix available7.8 High
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of environment variables passed to rsync can bypass the restrictions...CVE-2019-3464Fix available9.8 Critical
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by...CVE-2019-3463Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 morekernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds...CVE-2019-7308Fix available5.6 Medium
- linux kernel, canonical ubuntu linux +1 moreIn change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local...CVE-2017-18360Fix available5.5 Medium
- pizzashack rssh, canonical ubuntu linux, debian linux +1 more +3 morerssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a...CVE-2019-1000018Fix available7.8 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreLibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver...CVE-2018-20750Fix available9.8 Critical
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreLibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver...CVE-2018-20749Fix available9.8 Critical
- canonical ubuntu linux, debian linux, libvnc project libvncserver +6 more +8 moreLibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient...CVE-2018-20748Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- Show moreLoading…