Ubuntu

Records130All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high44CVSS 7.0–8.9

Exploited now

Ubuntu records in CISA KEV

TI-2021-02452 Linux Kernel Privilege Escalation Vulnerability CRITICAL 97KEV 2022-10-20

Components

Products in the NVD configurations · select one to filter the records

Ubuntu Linux 64 records HIGH Linux 6 records MEDIUM Ubuntu 6 records MEDIUM Python-apt 3 records LOW Language-selector 2 records LOW Linux Kernel 2 records MEDIUM Metal As A Service 2 records LOW 73-oubuntu 1 record LOW

Records

6 records in Ubuntu · all components

TI-2017-10567 CVE-2017-14461 · GHSA-r34f-p748-2x25

Out-of-bounds read in Dovecot

MEDIUM 48

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.16677 Published 2018-03-02 No fix listed CWE-125

TI-2013-01952 CVE-2013-2186 · GHSA-qx6h-9567-5fqw

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1…

MEDIUM 47

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files vi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.12666 Published 2013-10-28 Partial fix · 1.3.1 CWE-20

TI-2015-04611 CVE-2015-5479 · GHSA-73wj-87qj-vf4x

The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows…

LOW 33

The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01978 Published 2016-04-19 No fix listed CWE-189

TI-2015-01926 CVE-2015-2150 · GHSA-w7jv-fgrf-v497

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict…

LOW 23

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host c…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00534 Published 2015-03-12 Will not fix CWE-264

TI-2009-01230 CVE-2009-1295 · GHSA-5984-8426-hvc3

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before…

LOW 11

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00396 Published 2009-04-30 No fix listed CWE-16

TI-2009-01231 CVE-2009-1296 · GHSA-wp7j-cfx2-2rxm

The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the…

LOW 10

The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files fro…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00293 Published 2009-06-09 No fix listed CWE-200

Open these records in search →