Skip to contentSuse Linux Enterprise Server vulnerabilities
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 morearch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not...CVE-2009-29102.1 Low
- linux kernel, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2...CVE-2009-36122.1 Low
- gnome glib, opensuse, suse linux enterprise server +2 moreThe g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of...CVE-2009-3289Fix available7.8 High
- linux kernel, canonical ubuntu linux, opensuse +2 more +4 moreThe get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces...CVE-2009-32385.5 Medium
- postgresql, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreThe core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP...CVE-2009-32316.8 Medium
- linux kernel, canonical ubuntu linux, suse linux enterprise debuginfo +3 more +5 moreMemory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x...CVE-2009-29037.1 High
- apache http server, apple mac os x, debian linux +4 more +6 moreThe mod_proxy_ftp module in the Apache HTTP Server allows remote attackers to bypass intended...CVE-2009-3095Fix availableEPSS 13.5%5.0 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c...CVE-2009-2698Public exploit7.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreThe execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear...CVE-2009-28485.9 Medium
- xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 Medium
- apache xerces2 java, oracle jdk, canonical ubuntu linux +6 more +8 moreDenial of service in Apache Xerces2CVE-2009-2625Fix availableEPSS 30.4%5.0 Medium
- mozilla firefox, network security services, seamonkey +6 more +8 moreMozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before...CVE-2009-2408Fix available5.9 Medium
- mozilla firefox, fedoraproject fedora, opensuse +3 more +5 moreMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...CVE-2009-24724.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2...CVE-2009-1961Public exploit4.7 Medium
- apache apr-util, http server, apple mac os x +4 more +6 moreThe expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7,...CVE-2009-1955Public exploitFix availableEPSS 53.0%7.5 High
- freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...CVE-2009-0946Fix available7.5 High
- udev project udev, canonical ubuntu linux, debian linux +5 more +7 moreBuffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1...CVE-2009-11862.1 Low
- udev project udev, canonical ubuntu linux, debian linux +6 more +8 moreudev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which...CVE-2009-1185Public exploitFix availableEPSS 80.5%7.2 High
- christophe.varoqui multipath-tools, debian linux, fedoraproject fedora +8 more +10 moreThe Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as...CVE-2009-0115Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 morenfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a...CVE-2009-10724.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform...CVE-2009-08343.6 Low
- libpng, apple iphone os, mac os x +6 more +8 moreThe PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in...CVE-2009-0040Fix available6.8 Medium
- mozilla firefox, seamonkey, thunderbird +10 more +12 morensFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2...CVE-2008-50219.3 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...CVE-2008-4989Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 morefs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out...CVE-2007-67165.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in...CVE-2008-32755.5 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreQEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to...CVE-2008-1945Fix available2.1 Low
- debian linux, linux kernel, avaya communication manager +12 more +14 moreThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local...CVE-2008-28127.8 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreRace condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6...CVE-2008-13756.9 Medium
- mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...CVE-2008-0063Fix available7.5 High
- apple mac os x, canonical ubuntu linux, debian linux +7 more +9 moreThe XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute...CVE-2007-6427Fix available9.3 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreCross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3...CVE-2007-5000Fix availableEPSS 46.6%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and...CVE-2007-62062.1 Low
- php, canonical ubuntu linux, novell suse linux +4 more +6 moreThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...CVE-2007-1285Public exploitEPSS 18.8%7.5 High