Skip to contentCanonical Ubuntu Linux vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...CVE-2022-34918Public exploitFix available7.8 High
- canonical cloud-init, ubuntu linux +1 moresensitive data exposure in cloud-init logsCVE-2022-2084Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreModerate: kernel-rt security and bug fix updateCVE-2022-1184Fix available5.5 Medium
- canonical accountsservice, ubuntu linux, linux +2 moreAccountsservice incorrectly drops privilegesCVE-2022-1804Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreApport argument parsing mishandles filename splitting on older kernels resulting in argument...CVE-2022-28658Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreApport does not disable python crash handler before entering chrootCVE-2022-28657Fix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to consume RAM in the Apport processCVE-2022-28656Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to create arbitrary tcp dbus connectionsCVE-2022-28655Fix available7.1 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to fill up apport.logCVE-2022-28654Fix available5.5 Medium
- apport project apport, canonical ubuntu linux +1 more~/.config/apport/settings parsing is vulnerable to "billion laughs" attackCVE-2022-28652Fix available5.5 Medium
- canonical apport, ubuntu linux +1 moreApport can be tricked into connecting to arbitrary sockets as the root userCVE-2022-1242Fix available7.8 High
- apport, canonical ubuntu linux +1 moreThere is a race condition in the 'replaced executable' detection that, with the correct local...CVE-2021-3899Public exploitFix available7.8 High
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome gnome-remote-desktop +2 moreUbuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by...CVE-2022-1736Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...CVE-2022-29581Public exploitFix available7.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreUse after Free in tc_new_tfilter allowing for privilege escalation in Linux KernelCVE-2022-1055Fix available8.6 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsCVE-2021-4120Fix available8.2 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- strongswan, canonical ubuntu linux, debian linux +2 more +4 moreIn strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...CVE-2021-45079Fix available9.1 Critical
- advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 moreAIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...CVE-2021-45417Fix available7.8 High
- cisco clamav, canonical ubuntu linux, debian linux +2 moreClam AntiVirus (ClamAV) Denial of Service VulnerabilityCVE-2022-20698Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization...CVE-2021-4093Fix available8.8 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- canonical accountsservice, ubuntu linux +1 moreFree of static data in accountsserviceCVE-2021-3939Fix available7.8 High
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...CVE-2020-25722Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreA flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found...CVE-2021-3640Fix available7.0 High
- linux, linux kernel, canonical ubuntu linux +2 more +4 moreIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds...CVE-2021-3600Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...CVE-2021-3560In KEVPublic exploitFix availableEPSS 21.8%7.8 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32555Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32554Fix available7.3 High
- canonical apport, oracle openjdk, canonical ubuntu linux +2 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32553Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32552Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32551Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32550Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32549Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32548Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32547Fix available7.3 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypassCVE-2021-3491Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF bitwise ops ALU32 bounds trackingCVE-2021-3490Public exploitFix availableEPSS 27.4%7.8 High
- Show moreLoading…