← Back

Ubuntu Linux

ubuntu_linux

Vendor: Canonical • 4,120 CVEs

CVEs (4,120)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Canonical
IscNetapp+1 more
4Bind
LeapSteelstore Cloud Integrated Storage+1 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
4Canonical
DebianLibvnc Project+1 more
9Debian Linux
LibvncserverSimatic Itc1500 Firmware+6 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.
4Canonical
DebianLibvnc Project+1 more
9Debian Linux
LibvncserverSimatic Itc1500 Firmware+6 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.
4Canonical
DebianLibvnc Project+1 more
9Debian Linux
LibvncserverSimatic Itc1500 Firmware+6 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.
4Canonical
DebianLibvnc Project+1 more
9Debian Linux
LibvncserverSimatic Itc1500 Firmware+6 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.4 MEDIUM· v3
5.5 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.
4Canonical
DebianLibvncserver Project+1 more
4Debian Linux
LeapLibvncserver+1 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no kn...Show more
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundaryShow less
4Canonical
DebianLibvncserver Project+1 more
4Debian Linux
LeapLibvncserver+1 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c. NOTE: there is reportedly "no trust boundary crossed.
5Canonical
DebianLibvnc Project+2 more
10Debian Linux
LeapLibvncserver+7 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c.
5Canonical
DebianLibvnc Project+2 more
10Debian Linux
LeapLibvncserver+7 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
4Canonical
DebianLibvnc Project+1 more
9Debian Linux
LibvncserverSimatic Itc1500 Firmware+6 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
5Canonical
DebianLibvnc Project+2 more
10Debian Linux
LeapLibvncserver+7 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligned accesses in hybiReadAndDecode.
5Canonical
DebianLibvnc Project+2 more
10Debian Linux
LeapLibvncserver+7 more
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
5Canonical
DebianLibvnc Project+2 more
10Debian Linux
LeapLibvncserver+7 more
Nov 21, 2024
Jun 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.
2Canonical
Mutt
2Mutt
Ubuntu Linux
Jun 17, 2026
Jun 15, 2020
N/A· v4
4.8 MEDIUM· v3
5.8 MEDIUM· v2
Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.
6Canonical
FedoraprojectIntel+3 more
694Celeron 1000m
Celeron 1005mCeleron 1007u+691 more
Jun 17, 2026
Jun 15, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
4Canonical
DebianMutt+1 more
4Debian Linux
LeapMutt+1 more
Jun 17, 2026
Jun 15, 2020
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
4Canonical
LinuxNetapp+1 more
19Active Iq Unified Manager
Aff 8300 FirmwareAff 8700 Firmware+16 more
Jun 17, 2026
Jun 12, 2020
N/A· v4
4.4 MEDIUM· v3
3.6 LOW· v2
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.
5Canonical
DebianFedoraproject+2 more
5Android
Debian LinuxFedora+2 more
Jun 17, 2026
Jun 11, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is n...Show more
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941Show less
2Canonical
Redhat
2Openstack Cinder
Ubuntu Linux
Jun 17, 2026
Jun 10, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before...Show more
An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleIO or VxFlex OS backend storage driver, credentials for the entire backend are exposed in the ``connection_info`` element in all Block Storage v3 Attachments API calls containing that element. This flaw enables an end-user to create a volume, make an API call to show the attachment detail information, and retrieve a username and password that may be used to connect to another user's volume. Additionally, these credentials are valid for the ScaleIO or VxFlex OS Management API, should an attacker discover the Management API endpoint. Source: OpenStack projectShow less
4Canonical
OpensuseQemu+1 more
4Enterprise Linux
LeapQemu+1 more
Jun 17, 2026
Jun 9, 2020
N/A· v4
5.0 MEDIUM· v3
4.0 MEDIUM· v2
An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum...Show more
An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.Show less