Skip to contentCanonical vulnerabilities
Newest
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common...CVE-2017-17789Fix available7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when...CVE-2017-17788Fix available5.5 Medium
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common...CVE-2017-17787Fix available7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c...CVE-2017-17786Fix available7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins...CVE-2017-17785Fix available7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr...CVE-2017-17784Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function...CVE-2017-17682Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function...CVE-2017-17681Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage...CVE-2017-17680Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of...CVE-2017-17669Fix available5.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw...CVE-2017-16910Fix available6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw...CVE-2017-16909Fix available8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over...CVE-2017-17504Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read...CVE-2017-17499Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic...CVE-2017-1000407Fix available7.4 High
- uclouvain openjpeg, canonical ubuntu linux, debian linux +2 moreIn OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in...CVE-2017-17480Fix available9.8 Critical
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...CVE-2017-15422Fix available6.5 Medium
- google android, canonical ubuntu linux +1 moreAn elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions:...CVE-2017-13168Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19...CVE-2017-15868Fix available7.8 High
- vim, canonical ubuntu linux, debian linux +2 morefileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary...CVE-2017-17087Fix available5.5 Medium
- x libxcursor, canonical ubuntu linux, debian linux +2 morelibXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows...CVE-2017-16612Fix available7.5 High
- x libxfont, canonical ubuntu linux, debian linux +2 moreIn libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read)...CVE-2017-16611Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a...CVE-2017-15119Fix available5.8 Medium
- samba, canonical ubuntu linux, debian linux +3 more +5 moreSamba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging...CVE-2017-15275Fix availableEPSS 21.4%7.5 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute...CVE-2017-14746Fix available9.8 Critical
- busybox, canonical ubuntu linux, debian linux +3 more +5 moreIn the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete...CVE-2017-16544Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +2 morehw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration,...CVE-2017-16845Fix available10.0 Critical
- apport project apport, canonical ubuntu linux +1 moreApport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace...CVE-2017-14180Fix available7.8 High
- apport project apport, canonical ubuntu linux +1 moreApport before 2.13 does not properly handle crashes originating from a PID namespace allowing...CVE-2017-141797.8 High
- apport project apport, canonical ubuntu linux +1 moreApport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local...CVE-2017-14177Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...CVE-2017-7826Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check...CVE-2017-15115Fix available7.8 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreThe tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1...CVE-2017-15102Fix available6.3 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...CVE-2017-16642Public exploitFix availableEPSS 26.4%7.5 High
- samba rsync, canonical ubuntu linux, debian linux +2 moreThe receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a...CVE-2017-16548Fix available9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the...CVE-2017-16546Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8...CVE-2017-16533Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11...CVE-2017-16532Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows...CVE-2017-16529Fix available6.6 Medium
- linux kernel, canonical ubuntu linux +1 moresound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of...CVE-2017-16528Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moresound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of...CVE-2017-16527Fix available6.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of...CVE-2017-16526Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel...CVE-2017-16525Fix available6.6 Medium
- systemd project systemd, canonical ubuntu linux +1 moreIn systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC...CVE-2017-15908Fix availableEPSS 23.6%7.5 High
- busybox, canonical ubuntu linux, debian linux +2 moreThe get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an...CVE-2017-15873Fix available5.5 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- Show moreLoading…