Skip to contentCanonical Ubuntu Linux vulnerabilities
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF RINGBUF map oversized allocationCVE-2021-3489Fix available7.8 High
- openvpn, canonical ubuntu linux, debian linux +1 more +3 moreOpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access...CVE-2020-15078Fix available7.5 High
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 moreThe overlayfs implementation in the linux kernel did not properly validate with respect to user...CVE-2021-3493In KEVPublic exploitFix availableEPSS 49.2%8.8 High
- canonical ubuntu linux, ubuntu linux kernel +1 moreUbuntu linux kernel shiftfs file system double free vulnerabilityCVE-2021-3492Public exploitFix available8.8 High
- canonical libunity-webapps, unity-firefox-extension, ubuntu linux +2 morePotential DoS through abuse of rate limit in libunity-webapps for FirefoxCVE-2013-1055Fix available4.3 Medium
- canonical unity-firefox-extension, ubuntu linux +1 morePossible remote DOS in WebAppsCVE-2013-1054Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreLinux kernel bpf verifier incorrect mod32 truncationCVE-2021-3444Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...CVE-2020-27171Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs...CVE-2020-27170Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreAn issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c...CVE-2021-27364Fix available7.1 High
- canonical snapd, ubuntu linux +1 moreWhen generating the systemd service units for the docker snap (and other similar snaps), snapd...CVE-2020-27352Fix available9.3 Critical
- canonical snapd, ubuntu linux +1 moresnapd created ~/snap with too-wide permissionsCVE-2021-3155Fix available3.8 Low
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 moreGNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw...CVE-2020-29385Fix available5.5 Medium
- canonical aptdaemon, ubuntu linux +1 moreaptdaemon performed policykit permissions checks too lateCVE-2020-27349Fix available5.5 Medium
- canonical aptdaemon, ubuntu linux +1 moreAptdaemon error messages disclosed file existence to unprivileged users via dbus propertiesCVE-2020-16128Fix available3.8 Low
- canonical snapcraft, ubuntu linux +1 moresnapcraft may build snaps with incorrect LD_LIBRARY_PATHCVE-2020-27348Fix available6.8 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is...CVE-2020-29372Fix available4.7 Medium
- canonical pulseaudio, ubuntu linux +1 moreBypass of snapd pulseaudio restrictionsCVE-2020-16123Fix available4.4 Medium
- wordpress, canonical ubuntu linux, debian linux +2 moreWordPress before 5.5.2 allows CSRF attacks that change a theme's background image.CVE-2020-28040Fix available4.3 Medium
- wordpress, canonical ubuntu linux, debian linux +2 moreis_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file...CVE-2020-28039Fix available9.1 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-14837Fix available4.9 Medium
- containerd, canonical ubuntu linux, debian linux +2 morecontainerd can be coerced into leaking credentials during image pullCVE-2020-15157Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve...CVE-2020-25645Fix available7.5 High
- linux kernel, canonical ubuntu linux +1 moreUnprivileged overlay + shiftfs read accessCVE-2020-16120Fix available5.1 Medium
- canonical linux kernel, ubuntu linux, debian linux +1 more +3 moreDCCP CCID structure use-after-freeCVE-2020-16119Fix available6.3 Medium
- red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 moreMultiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the...CVE-2020-14355Fix available6.6 Medium
- php, canonical ubuntu linux, debian linux +4 more +6 morePHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070Fix available4.3 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IVCVE-2020-7069Fix available5.4 Medium
- python urllib3, canonical ubuntu linux, debian linux +2 more +4 moreCRLF injection in urllib3CVE-2020-26137Fix available6.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreAn integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`...CVE-2020-14378Fix available3.3 Low
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of...CVE-2020-14377Fix available7.1 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds...CVE-2020-14376Fix available7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors,...CVE-2020-14375Fix available7.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking...CVE-2020-14374Fix available8.8 High
- python, canonical ubuntu linux, debian linux +8 more +10 morehttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...CVE-2020-26116Fix available7.2 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A...CVE-2020-25641Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel...CVE-2020-26088Fix available5.5 Medium
- packagekit, canonical ubuntu linux +1 morePackageKit error messages leak presence and mimetype of files to unprivileged usersCVE-2020-16121Fix available3.3 Low
- gon project gon, canonical ubuntu linux, debian linux +2 moreGon gem lack of escaping certain input when outputting as JSONCVE-2020-25739Fix available6.1 Medium
- perl dbi, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation...CVE-2019-20919Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata...CVE-2020-14385Fix available5.5 Medium
- google brotli, canonical ubuntu linux, debian linux +7 more +9 moreBuffer overflow in Brotli libraryCVE-2020-8927Public exploitFix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreA race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8...CVE-2020-25285Fix available6.4 Medium
- perl dbi, canonical ubuntu linux +1 moreAn issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods...CVE-2013-7490Fix available5.3 Medium
- microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 moreAn untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able...CVE-2020-14392Fix available5.5 Medium
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...CVE-2020-25219Fix available7.5 High
- yaws, canonical ubuntu linux, debian linux +2 moreCGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.CVE-2020-24916Fix availableEPSS 17.4%9.8 Critical
- yaws, canonical ubuntu linux, debian linux +2 moreWebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.CVE-2020-24379Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local...CVE-2020-25212Fix available7.0 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreRaccoon attackCVE-2020-1968Fix available3.7 Low
- Show moreLoading…