Skip to contentUbuntu vulnerabilities
Newest
- ubuntu linuxA regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to...CVE-2007-4601Fix available5.0 Medium
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 moreInteger overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows...CVE-2007-1352Fix available3.8 Low
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 moreInteger overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before...CVE-2007-1351Fix available8.5 High
- ubuntu linuxUbuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource...CVE-2006-56484.6 Medium
- ubuntu linuxUnspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS,...CVE-2006-56494.6 Medium
- gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 moreA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0...CVE-2006-6235Fix available10.0 High
- rpm package manager, ubuntu linux +1 moreHeap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4...CVE-2006-5466Fix available5.4 Medium
- ubuntu linuxpasswd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it...CVE-2006-35977.2 High
- ubuntu linuxpasswd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag...CVE-2006-3378Fix available7.2 High
- ubuntu linuxThe Ubuntu 5.10 installer does not properly clear passwords from the installer log file ...CVE-2006-1183Public exploit7.2 High
- todd miller sudo, ubuntu linux +1 moresudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows...CVE-2006-0151Fix available7.2 High
- ubuntu linuxSSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is...CVE-2005-0106Fix available4.6 Medium
- kde, conectiva linux, kde quanta +1 more +3 moreKommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,...CVE-2005-07547.5 High
- gnu gzip, freebsd, gentoo linux +9 more +11 moreRace condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local...CVE-2005-0988Fix available3.7 Low
- conectiva linux, linux kernel, redhat enterprise linux +2 more +4 moreThe bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1...CVE-2005-0750Public exploit7.2 High
- suse linux, redhat enterprise linux, trustix secure linux +2 moreUnknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to...CVE-2005-03845.0 Medium
- freebsd, redhat enterprise linux, enterprise linux desktop +5 more +7 moreHyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel...CVE-2005-01095.6 Medium
- debian linux, xpdf, ascii ptex +15 more +17 moreThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete...CVE-2005-0206Fix available7.5 High
- larry wall perl, ibm aix, redhat enterprise linux +5 more +7 moreBuffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support ...CVE-2005-0156Public exploitFix available2.1 Low
- easy software products cups, kde kpdf, libextractor +24 more +26 moreXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and...CVE-2005-3626Fix available5.0 Medium
- easy software products cups, kde kpdf, libextractor +24 more +26 moreXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and...CVE-2005-3625Fix available10.0 High
- easy software products cups, kde kpdf, libextractor +24 more +26 moreThe CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler...CVE-2005-3624Fix available5.0 Medium
- debian linux, redhat enterprise linux, enterprise linux desktop +2 moreThe DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a...CVE-2005-0077Fix available2.1 Low
- conectiva linux, linux kernel, avaya converged communications server +14 more +16 moreRace condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux...CVE-2004-1235Public exploit6.2 Medium
- gnu mailman, ubuntu linux +1 moreThe 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error...CVE-2005-00805.0 Medium
- conectiva linux, gnu realtime linux security module +1 moreThe POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle...CVE-2004-13377.2 High
- php, openpkg, trustix secure linux +1 more +3 moreBuffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...CVE-2004-1065EPSS 10.0%10.0 High
- linux kernel, ubuntu linux +1 moreRace condition in Linux kernel 2.6 allows local users to read the environment variables of...CVE-2004-10581.2 Low
- linux kernel, ubuntu linux +1 moreDirect Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock,...CVE-2004-10566.4 Medium
- php, openpkg, trustix secure linux +1 more +3 moreThe deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to...CVE-2004-101910.0 High
- linux kernel, ubuntu linux +1 moreMultiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x...CVE-2004-1137Public exploitEPSS 20.8%10.0 High
- linux kernel, ubuntu linux +1 moreThe scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9...CVE-2004-1016Public exploit2.1 Low
- carnegie mellon university cyrus imap server, redhat fedora core, ubuntu linux +2 moreOff-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads...CVE-2004-106710.0 High
- linux kernel, ubuntu linux +1 moreMultiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in...CVE-2004-11517.2 High
- oracle mysql, suse linux +1 moreMySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via...CVE-2004-09565.0 Medium
- linux kernel, ubuntu linux +1 moreRace condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service ...CVE-2004-10691.2 Low
- ubuntu linux, linux kernel, redhat enterprise linux +2 more +4 moreA "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier,...CVE-2004-10686.2 Medium
- carnegie mellon university cyrus imap server, redhat fedora core, ubuntu linux +2 moreBuffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option...CVE-2004-101510.0 High
- carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 moreStack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus...CVE-2004-101110.0 High
- linux kernel, suse linux, redhat enterprise linux +4 more +6 moreThe smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6...CVE-2004-09496.4 Medium
- linux kernel, suse linux, redhat enterprise linux +4 more +6 moreMultiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote...CVE-2004-08836.4 Medium
- carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 moreThe argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote...CVE-2004-1013Fix available10.0 High
- carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 moreThe argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote...CVE-2004-1012Fix available10.0 High
- samba, conectiva linux, redhat enterprise linux +3 more +5 moreBuffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow...CVE-2004-0882Fix availableEPSS 13.7%10.0 High
- todd miller sudo, debian linux, mandrakesoft mandrake linux +3 more +5 moresudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style...CVE-2004-1051Fix available7.2 High
- yukihiro matsumoto ruby, gentoo linux, mandrakesoft mandrake linux +1 more +3 moreThe CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a...CVE-2004-0983Fix available5.0 Medium
- bogofilter email filter, ubuntu linux +1 moreThe quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a...CVE-2004-1007Fix available5.0 Medium
- xmlsoft libxml, libxml2, redhat fedora core +3 more +5 moreMultiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may...CVE-2004-0989Public exploitFix availableEPSS 21.7%10.0 High
- linux kernel, ubuntu linux +1 moreMultiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1)...CVE-2004-08141.2 Low
- easy software products cups, xpdf, debian linux +10 more +12 moreMultiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow...CVE-2004-0889Fix available10.0 High
- Show moreLoading…