Canonical
Page 20 of 44 — Canonical CVEs from a corpus of 4332, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18344 | Medium | 5.5 | 2018-07-26 | The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify fi… |
CVE-2015-9261 | Medium | 5.5 | 2018-07-26 | huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip op… |
CVE-2018-10881 | Medium | 4.2 | 2018-07-26 | A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and… |
CVE-2018-10879 | Medium | 4.2 | 2018-07-26 | A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or uns… |
CVE-2018-10878 | High | 7.8 | 2018-07-26 | A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is po… |
CVE-2018-10876 | Medium | 5.0 | 2018-07-26 | A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a cr… |
CVE-2017-7526 | Medium | 6.1 | 2018-07-26 | libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method fo… |
CVE-2018-13988 | Medium | 6.5 | 2018-07-25 | Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by… |
CVE-2018-10880 | Medium | 5.5 | 2018-07-25 | Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_d… |
CVE-2018-14551 | Critical | 9.8 | 2018-07-23 | The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption. |
CVE-2016-10727 | Critical | 9.8 | 2018-07-20 | camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a passwo… |
CVE-2018-14437 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. |
CVE-2018-14436 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. |
CVE-2018-14435 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. |
CVE-2018-14434 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c. |
CVE-2018-14404 | Medium | 6.5 | 2018-07-19 | A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression… |
CVE-2018-12911 | Critical | 9.8 | 2018-07-19 | WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and… |
CVE-2017-7481 | Critical | 9.8 | 2018-07-19 | Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls… |
CVE-2018-10877 | High | 7.3 | 2018-07-18 | Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. |
CVE-2018-3081 | Medium | 5.0 | 2018-07-18 | Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.60 and prior, 5.6.40… |
CVE-2018-3077 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 a… |
CVE-2018-3071 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log). Supported versions that are affected are 5.7.22 and prior. Easily exploi… |
CVE-2018-3070 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.60 and prior, 5.6.40… |
CVE-2018-3066 | Low | 3.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.5.60 and prior, 5.6.40… |
CVE-2018-3065 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior and 8.0.11 a… |
CVE-2018-3064 | High | 7.1 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior… |
CVE-2018-3063 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and p… |
CVE-2018-3062 | Medium | 5.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.40 and prior, 5.7.2… |
CVE-2018-3061 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior. Easily expl… |
CVE-2018-3060 | Medium | 6.5 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and pr… |
CVE-2018-3058 | Medium | 4.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior… |
CVE-2018-3056 | Medium | 4.3 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.22 and p… |
CVE-2018-3054 | Medium | 4.9 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 a… |
CVE-2018-2952 | Low | 3.7 | 2018-07-18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java… |
CVE-2018-2767 | Low | 3.1 | 2018-07-18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and p… |
CVE-2018-14362 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cac… |
CVE-2018-14359 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data. |
CVE-2018-14358 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long… |
CVE-2018-14357 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote charact… |
CVE-2018-14356 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. |
CVE-2018-14355 | Medium | 5.3 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name. |
CVE-2018-14354 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote charact… |
CVE-2018-14353 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow. |
CVE-2018-14352 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading… |
CVE-2018-14351 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size. |
CVE-2018-14350 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long… |
CVE-2018-14349 | Critical | 9.8 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message. |
CVE-2018-10840 | Medium | 6.6 | 2018-07-16 | Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating… |
CVE-2018-0360 | Medium | 5.5 | 2018-07-16 | ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in… |
CVE-2018-10875 | High | 7.8 | 2018-07-13 | A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under th… |
CVE-2018-0500 | Critical | 9.8 | 2018-07-11 | Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who ca… |
CVE-2018-1116 | Medium | 4.4 | 2018-07-10 | A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows… |
CVE-2018-13785 | Medium | 6.5 | 2018-07-09 | In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by… |
CVE-2018-13440 | Medium | 6.5 | 2018-07-08 | The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a… |
CVE-2018-13406 | High | 7.8 | 2018-07-06 | An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being ab… |
CVE-2018-13405 | High | 7.8 | 2018-07-06 | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenar… |
CVE-2018-12910 | Critical | 9.8 | 2018-07-05 | The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname. |
CVE-2018-13153 | Medium | 6.5 | 2018-07-05 | In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. |
CVE-2018-13099 | Medium | 5.5 | 2018-07-03 | An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory access and BUG) can occur for a modified… |
CVE-2018-13096 | Medium | 5.5 | 2018-07-03 | An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service (out-of-bounds memory access and BUG) can occur upon encounter… |
CVE-2018-13094 | Medium | 5.5 | 2018-07-03 | An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_in… |
CVE-2018-10855 | Medium | 5.9 | 2018-07-03 | Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive… |
CVE-2018-12896 | Medium | 5.5 | 2018-07-02 | An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the… |
CVE-2018-13053 | Low | 3.3 | 2018-07-02 | The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because kti… |
CVE-2018-0499 | Medium | 6.1 | 2018-07-02 | A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapi… |
CVE-2018-13043 | Critical | 9.8 | 2018-07-01 | scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuratio… |
CVE-2018-10860 | Medium | 5.4 | 2018-06-29 | perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extrac… |
CVE-2018-13006 | Critical | 9.8 | 2018-06-29 | An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump. |
CVE-2018-13005 | Critical | 9.8 | 2018-06-29 | An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read. |
CVE-2018-12931 | High | 7.8 | 2018-06-28 | ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of… |
CVE-2018-12930 | High | 7.8 | 2018-06-28 | ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause… |
CVE-2018-12929 | Medium | 5.5 | 2018-06-28 | ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denia… |
CVE-2018-12928 | Medium | 5.5 | 2018-06-28 | In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesyst… |
CVE-2018-12904 | Medium | 4.9 | 2018-06-27 | In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially a… |
CVE-2018-12900 | High | 8.8 | 2018-06-26 | Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alp… |
CVE-2018-1000517 | Critical | 9.8 | 2018-06-26 | BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can… |
CVE-2018-1000204 | Medium | 5.3 | 2018-06-26 | Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV and an empty 6-byte cmdp. This may lead… |
CVE-2018-12882 | Critical | 9.8 | 2018-06-26 | exif_read_from_impl in ext/exif/exif.c in PHP 7.2.x through 7.2.7 allows attackers to trigger a use-after-free (in exif_read_from_file) because it closes a str… |
CVE-2018-12699 | Critical | 9.8 | 2018-06-23 | finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impac… |
CVE-2018-12698 | High | 7.5 | 2018-06-23 | demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) duri… |
CVE-2018-12697 | High | 7.5 | 2018-06-23 | A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distribut… |
CVE-2018-3665 | Medium | 5.6 | 2018-06-21 | System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data… |
CVE-2018-12617 | High | 7.5 | 2018-06-21 | qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_mall… |
CVE-2018-12600 | High | 8.8 | 2018-06-20 | In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file. |
CVE-2018-12599 | High | 8.8 | 2018-06-20 | In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file. |
CVE-2018-1120 | Low | 2.8 | 2018-06-20 | A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or… |
CVE-2018-12293 | High | 8.8 | 2018-06-19 | The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to versi… |
CVE-2018-10811 | High | 7.5 | 2018-06-19 | strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable. |
CVE-2018-1061 | Medium | 6.5 | 2018-06-19 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker… |
CVE-2018-1333 | High | 7.5 | 2018-06-18 | By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed… |
CVE-2018-1152 | Medium | 6.5 | 2018-06-18 | libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. |
CVE-2018-1060 | High | 7.5 | 2018-06-18 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use… |
CVE-2018-11574 | Critical | 9.8 | 2018-06-14 | Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authen… |
CVE-2018-0495 | Medium | 4.7 | 2018-06-13 | Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding… |
CVE-2018-11806 | High | 8.2 | 2018-06-13 | m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams. |
CVE-2018-12265 | High | 8.8 | 2018-06-13 | Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. |
CVE-2018-12264 | High | 8.8 | 2018-06-13 | Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. |
CVE-2018-5814 | High | 7.0 | 2018-06-12 | In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operation… |
CVE-2018-0732 | High | 7.5 | 2018-06-12 | During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the… |
CVE-2018-12233 | High | 7.8 | 2018-06-12 | In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two… |