Ubuntu Linux vulnerabilities

• canonical linux-bluefield, ubuntu package linux-bluefield +1 more DDoS in Ubuntu package linux-bluefield CVE-2023-0881 7.5 HighMarch 31, 2025
• canonical accountsservice, ubuntu linux, linux +2 more Accountsservice incorrectly drops privileges CVE-2022-1804 Fix available 5.5 MediumMay 24, 2022
• linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more The overlayfs implementation in the linux kernel did not properly validate with respect to user... CVE-2021-3493 In KEVPublic exploitFix available EPSS 49.2% 8.8 HighApril 15, 2021
• canonical ubuntu linux, ubuntu linux kernel +1 more Ubuntu linux kernel shiftfs file system double free vulnerability CVE-2021-3492 Public exploitFix available 8.8 HighApril 15, 2021
• canonical ubuntu linux, debian linux, ubuntu linux kernel (aufs filesystem module) +2 more aufs: improperly managed inode reference counts in the vfsub_dentry_open() method CVE-2020-11935 Fix available 4.4 MediumJune 29, 2020
• canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 more Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 CVE-2020-8832 Fix available 5.5 MediumMarch 5, 2020
• linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 more Mishandling of file-system uid/gid with namespaces in shiftfs CVE-2019-15793 Public exploitFix available 6.5 MediumNovember 12, 2019
• linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 more Type confusion in shiftfs CVE-2019-15792 Public exploitFix available 7.1 HighNovember 12, 2019
• linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 more Reference count underflow in shiftfs CVE-2019-15791 Public exploitFix available 7.1 HighNovember 12, 2019
• linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs CVE-2019-15794 Public exploitFix available 7.1 HighNovember 8, 2019
• canonical ubuntu linux, debian linux, x.org x server +2 more The X.Org X wrapper (xserver-wrapper.c) in Debian GNU/Linux and Ubuntu Linux does not properly... CVE-2011-4613 Public exploitFix available 4.6 MediumDecember 18, 2011
• ubuntu linux The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on... CVE-2010-0834 9.3 HighAugust 9, 2010
• ubuntu linux The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9... CVE-2009-1601 6.8 MediumMay 11, 2009
• ubuntu linux system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by "Users and Groups" in... CVE-2008-6792 Fix available 5.0 MediumMay 7, 2009
• branden robinson xvfb-run, debian linux, redhat fedora +2 more xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place... CVE-2009-1573 Fix available 4.6 MediumMay 6, 2009
• ubuntu linux GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and ... CVE-2009-0578 Fix available 6.2 MediumMarch 5, 2009
• ubuntu linux nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which... CVE-2009-0365 Fix available 4.6 MediumMarch 5, 2009
• linux kernel, ubuntu linux kernel +1 more Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote... CVE-2008-4395 Fix available 8.3 HighNovember 6, 2008
• ubuntu linux Buffer overflow in enscript before 1.6.4 has unknown impact and attack vectors, possibly related... CVE-2008-4306 Fix available 9.3 HighNovember 4, 2008
• ubuntu linux The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys... CVE-2008-2285 Fix available 5.0 MediumMay 14, 2008
• ubuntu linux kernel The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and... CVE-2006-7229 7.8 HighNovember 15, 2007
• openbsd, debian linux, redhat enterprise linux +3 more +5 more Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0... CVE-2007-5365 Public exploitFix available EPSS 80.3% 7.2 HighOctober 11, 2007
• ubuntu linux A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to... CVE-2007-4601 Fix available 5.0 MediumAugust 30, 2007
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 more Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows... CVE-2007-1352 Fix available 3.8 LowApril 6, 2007
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 more Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before... CVE-2007-1351 Fix available 8.5 HighApril 6, 2007
• ubuntu linux Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource... CVE-2006-5648 4.6 MediumDecember 14, 2006
• ubuntu linux Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS,... CVE-2006-5649 Fix available 4.6 MediumDecember 10, 2006
• gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 more A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0... CVE-2006-6235 Fix available 10.0 HighDecember 7, 2006
• rpm package manager, ubuntu linux +1 more Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4... CVE-2006-5466 Fix available 5.4 MediumNovember 6, 2006
• ubuntu linux passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it... CVE-2006-3597 7.2 HighJuly 14, 2006
• ubuntu linux passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag... CVE-2006-3378 Fix available 7.2 HighJuly 6, 2006
• ubuntu linux The Ubuntu 5.10 installer does not properly clear passwords from the installer log file ... CVE-2006-1183 Public exploit 7.2 HighMarch 13, 2006
• todd miller sudo, ubuntu linux +1 more sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows... CVE-2006-0151 Fix available 7.2 HighJanuary 9, 2006
• ubuntu linux SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is... CVE-2005-0106 Fix available 4.6 MediumMay 3, 2005
• kde, conectiva linux, kde quanta +1 more +3 more Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,... CVE-2005-0754 7.5 HighApril 22, 2005
• gnu gzip, freebsd, gentoo linux +9 more +11 more Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local... CVE-2005-0988 Fix available 3.7 LowApril 6, 2005
• conectiva linux, linux kernel, redhat enterprise linux +2 more +4 more The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1... CVE-2005-0750 Public exploitFix available 7.2 HighMarch 27, 2005
• suse linux, redhat enterprise linux, trustix secure linux +2 more Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to... CVE-2005-0384 Fix available 5.0 MediumMarch 15, 2005
• freebsd, redhat enterprise linux, enterprise linux desktop +5 more +7 more Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel... CVE-2005-0109 Fix available 5.6 MediumMarch 5, 2005
• debian linux, xpdf, ascii ptex +15 more +17 more The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete... CVE-2005-0206 Fix available 7.5 HighFebruary 15, 2005
• larry wall perl, ibm aix, redhat enterprise linux +5 more +7 more Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support ... CVE-2005-0156 Public exploitFix available 2.1 LowFebruary 7, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3626 Fix available 5.0 MediumJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3625 Fix available 10.0 HighJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler... CVE-2005-3624 Fix available 5.0 MediumJanuary 25, 2005
• debian linux, redhat enterprise linux, enterprise linux desktop +2 more The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a... CVE-2005-0077 Fix available 2.1 LowJanuary 25, 2005
• conectiva linux, linux kernel, avaya converged communications server +14 more +16 more Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux... CVE-2004-1235 Public exploitFix available 6.2 MediumJanuary 20, 2005
• gnu mailman, ubuntu linux +1 more The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error... CVE-2005-0080 5.0 MediumJanuary 19, 2005
• conectiva linux, gnu realtime linux security module +1 more The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle... CVE-2004-1337 7.2 HighDecember 23, 2004
• php, openpkg, trustix secure linux +1 more +3 more Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2... CVE-2004-1065 Fix available EPSS 10.0% 10.0 HighDecember 22, 2004
• linux kernel, ubuntu linux +1 more Race condition in Linux kernel 2.6 allows local users to read the environment variables of... CVE-2004-1058 Fix available 1.2 LowDecember 22, 2004
• Show olderLoading…