canonical Vulnerability Advisory Catalog

Total 562 security vulnerabilities recorded for canonical software and firmware.

← Back to All Vendors
Component: ubuntu_linux

Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, fu...

📅 2018-03-13
CVSS 7.8 Dossier →
CVE-2018-7537 MEDIUM
Component: ubuntu_linux

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() m...

📅 2018-03-09
CVSS 5.3 Dossier →
CVE-2018-7536 MEDIUM
Component: ubuntu_linux

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely ...

📅 2018-03-09
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless...

📅 2017-10-17
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Ma...

📅 2017-10-17
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowin...

📅 2017-10-17
CVSS 6.8 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, al...

📅 2017-10-17
CVSS 6.8 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during th...

📅 2017-10-17
CVSS 8.1 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key...

📅 2017-10-17
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker withi...

📅 2017-10-17
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way ...

📅 2017-10-17
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within...

📅 2017-10-17
CVSS 5.3 Dossier →
Component: ubuntu_linux

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allow...

📅 2017-10-17
CVSS 6.8 Dossier →
Component: ubuntu_linux

Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allo...

📅 2017-10-03
CVSS 7.5 Dossier →
Component: ubuntu_linux

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of...

📅 2017-10-03
CVSS 7.5 Dossier →
Component: ubuntu_linux

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 ...

📅 2017-10-03
CVSS 5.9 Dossier →
CVE-2017-14493 CRITICAL
Component: ubuntu_linux

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafte...

📅 2017-10-03
CVSS 9.8 Dossier →
CVE-2017-14492 CRITICAL
Component: ubuntu_linux

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted...

📅 2017-10-03
CVSS 9.8 Dossier →
Component: ubuntu_linux

In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is a...

📅 2017-10-03
CVSS 7.5 Dossier →
Component: ubuntu_linux

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute ar...

📅 2017-09-20
CVSS 8.8 Dossier →
Component: ubuntu_linux

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubu...

📅 2017-08-25
CVSS 7.0 Dossier →
Component: ubuntu_linux

Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as package...

📅 2017-08-25
CVSS 7.8 Dossier →
Component: ubuntu_linux

The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a d...

📅 2017-07-25
CVSS 8.8 Dossier →
CVE-2015-1323 MEDIUM
Component: ubuntu_linux

The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu...

📅 2017-07-21
CVSS 5.5 Dossier →
Page 11 of 24 (562 Total Records)