Browse CVEs

MEDIUM 5.5 CVE-2020-8832 The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for… Ubuntu Linux Mitigation only Fix from $1,6002020-04-10 HIGH 7.8 CVE-2019-11484 Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie. Ubuntu Linux No fix yet Fix from $1,9502020-02-08 HIGH 7.8 CVE-2019-11481 Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic … Ubuntu Linux No fix yet Fix from $1,9502020-02-08 HIGH 7.5 CVE-2020-3123 A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthentica… Ubuntu Linux Mitigation only Fix from $1,9502020-02-05 MEDIUM 5.5 CVE-2019-14615 Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user … Ubuntu Linux No fix yet Fix from $1,6002020-01-17 HIGH 7.8 CVE-2019-2214 In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… Ubuntu Linux No fix yet Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2201 In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead … Ubuntu Linux Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.5 CVE-2019-17450 find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attac… Ubuntu Linux No fix yet Fix from $1,6002019-10-10 MEDIUM 6.5 CVE-2019-17451 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow lead… Ubuntu Linux No fix yet Fix from $1,6002019-10-10 MEDIUM 6.5 CVE-2019-9325 In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional … Ubuntu Linux Mitigation only Fix from $1,6002019-09-27 HIGH 7.5 CVE-2019-9232EPSS 5% In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional … Ubuntu Linux Mitigation only Fix from $1,9502019-09-27 MEDIUM 6.3 CVE-2019-13627 It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3… Ubuntu Linux Mitigation only Fix from $1,6002019-09-25 HIGH 8.1 CVE-2019-9506 The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker fr… Ubuntu Linux Mitigation only Fix from $1,9502019-08-14 HIGH 7.8 CVE-2019-14496 LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow. Ubuntu Linux No fix yet Fix from $1,9502019-08-01 HIGH 7.8 CVE-2019-14497 ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow. Ubuntu Linux No fix yet Fix from $1,9502019-08-01 MEDIUM 5.5 CVE-2019-14464 XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow. Ubuntu Linux No fix yet Fix from $1,6002019-07-31 MEDIUM 5.5 CVE-2019-14250 An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a ze… Ubuntu Linux No fix yet Fix from $1,6002019-07-24 HIGH 7.8 CVE-2019-1010006 Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attac… Ubuntu Linux No fix yet Fix from $1,9502019-07-15 HIGH 7.5 CVE-2019-12211 When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destinat… Ubuntu Linux No fix yet Fix from $1,9502019-05-20 MEDIUM 6.5 CVE-2019-12213 When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion. Ubuntu Linux No fix yet Fix from $1,6002019-05-20 HIGH 7.8 CVE-2019-2054 In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. T… Ubuntu Linux No fix yet Fix from $1,9502019-05-08 CRITICAL 9.8 CVE-2016-1579 UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functiona… Ubuntu Download Manager Mitigation only Fix from $2,3002019-04-22 MEDIUM 6.5 CVE-2018-3979 A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader e… Ubuntu Linux No fix yet Fix from $1,6002019-04-01 HIGH 8.8 CVE-2019-8904 do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf. Ubuntu Linux No fix yet Fix from $1,9502019-02-18 HIGH 7.8 CVE-2019-7310 In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attacke… Ubuntu Linux No fix yet Fix from $1,9502019-02-03 HIGH 7.5 CVE-2018-5738EPSS 11% Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date, affecting which clients are p… Ubuntu Linux Mitigation only Fix from $1,9502019-01-16 HIGH 8.8 CVE-2018-20549 There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19. Ubuntu Linux No fix yet Fix from $1,9502018-12-28 MEDIUM 6.5 CVE-2018-20544 There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19. Ubuntu Linux No fix yet Fix from $1,6002018-12-28 CRITICAL 9.8 CVE-2018-15127EPSS 15% LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extensio… Ubuntu Linux Mitigation only Fix from $2,3002018-12-19 HIGH 8.8 CVE-2018-19541 An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.1… Ubuntu Linux No fix yet Fix from $1,9502018-11-26