Skip to contentCanonical vulnerabilities
Newest
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- canonical multipassMacOS version of Multipass incorrect owner for application directoryCVE-2021-37478.8 High
- canonical multipassWindows version of Multipass unauthenticated localhost tcp control socket can perform mountsCVE-2021-36268.8 High
- canonical apportApport info disclosure via path traversal bug in read_fileCVE-2021-3710Fix available6.5 Medium
- canonical apportApport file permission bypass through emacs byte compilation errorsCVE-2021-3709Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreA flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found...CVE-2021-3640Fix available7.0 High
- linux, linux kernel, canonical ubuntu linux +2 more +4 moreIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds...CVE-2021-3600Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...CVE-2021-3560In KEVPublic exploitFix availableEPSS 21.8%7.8 High
- canonical apportapport process_report() arbitrary file writeCVE-2021-32557Fix available5.2 Medium
- canonical apportapport get_modified_conffiles() function command injectionCVE-2021-32556Fix available3.8 Low
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32555Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32554Fix available7.3 High
- canonical apport, oracle openjdk, canonical ubuntu linux +2 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32553Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32552Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32551Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32550Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32549Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32548Fix available7.3 High
- canonical apport, ubuntu linux +1 moreapport read_file() function could follow maliciously constructed symbolic linksCVE-2021-32547Fix available7.3 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypassCVE-2021-3491Fix available7.8 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF bitwise ops ALU32 bounds trackingCVE-2021-3490Public exploitFix availableEPSS 27.4%7.8 High
- linux kernel, canonical ubuntu linux +1 moreLinux kernel eBPF RINGBUF map oversized allocationCVE-2021-3489Fix available7.8 High
- openvpn, canonical ubuntu linux, debian linux +1 more +3 moreOpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access...CVE-2020-15078Fix available7.5 High
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 moreThe overlayfs implementation in the linux kernel did not properly validate with respect to user...CVE-2021-3493In KEVPublic exploitFix availableEPSS 49.2%8.8 High
- canonical ubuntu linux, ubuntu linux kernel +1 moreUbuntu linux kernel shiftfs file system double free vulnerabilityCVE-2021-3492Public exploitFix available8.8 High
- canonical libunity-webapps, unity-firefox-extension, ubuntu linux +2 morePotential DoS through abuse of rate limit in libunity-webapps for FirefoxCVE-2013-1055Fix available4.3 Medium
- canonical unity-firefox-extension, ubuntu linux +1 morePossible remote DOS in WebAppsCVE-2013-1054Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreLinux kernel bpf verifier incorrect mod32 truncationCVE-2021-3444Fix available7.8 High
- canonical cloud-initsensitive data exposure in cloud-init logsCVE-2021-3429Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by...CVE-2020-27171Fix available6.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs...CVE-2020-27170Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreAn issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c...CVE-2021-27364Fix available7.1 High
- canonical snapd, ubuntu linux +1 moreWhen generating the systemd service units for the docker snap (and other similar snaps), snapd...CVE-2020-27352Fix available9.3 Critical
- canonical apportapport can be stalled by reading a FIFOCVE-2021-25684Fix available8.8 High
- canonical apportapport improperly parses /proc/pid/statCVE-2021-25683Fix available8.8 High
- canonical apportapport improperly parses /proc/pid/statusCVE-2021-25682Fix available8.8 High
- canonical remote-login-serviceInsecure crypto for storing passwordsCVE-2013-10535.5 Medium
- canonical snapd, ubuntu linux +1 moresnapd created ~/snap with too-wide permissionsCVE-2021-3155Fix available3.8 Low
- canonical python-apt, debian advanced package tool +1 moreVarious memory and file descriptor leaks in apt-pythonCVE-2020-27351Fix available2.0 Low
- canonical apt, debian advanced package tool, netapp solidfire baseboard management controller firmware +2 moreapt integer wraparoundCVE-2020-27350Fix available5.7 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 moreGNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw...CVE-2020-29385Fix available5.5 Medium
- canonical aptdaemon, ubuntu linux +1 moreaptdaemon performed policykit permissions checks too lateCVE-2020-27349Fix available5.5 Medium
- canonical aptdaemon, ubuntu linux +1 moreAptdaemon error messages disclosed file existence to unprivileged users via dbus propertiesCVE-2020-16128Fix available3.8 Low
- canonical snapcraft, ubuntu linux +1 moresnapcraft may build snaps with incorrect LD_LIBRARY_PATHCVE-2020-27348Fix available6.8 Medium
- canonical software-propertiessoftware-properties incorrectly validated TLS certificatesCVE-2012-0955Fix available6.8 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is...CVE-2020-29372Fix available4.7 Medium
- canonical pulseaudio, ubuntu linux +1 moreBypass of snapd pulseaudio restrictionsCVE-2020-16123Fix available4.4 Medium
- wordpress, canonical ubuntu linux, debian linux +2 moreWordPress before 5.5.2 allows CSRF attacks that change a theme's background image.CVE-2020-28040Fix available4.3 Medium
- Show moreLoading…