Ubuntu

ubuntu

Vendor: Ubuntu • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-14461 3Debian DovecotUbuntu 3Debian Linux DovecotUbuntu Nov 21, 2024 Mar 2, 2018 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vuln...Show more A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the server.Show less
CVE-2015-5479 3Libav OpensuseUbuntu 3Leap LibavUbuntu May 6, 2026 Apr 19, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with crafted dimensions.
CVE-2015-2150 3Linux UbuntuXen 3Linux Kernel UbuntuXen May 6, 2026 Mar 12, 2015 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host c...Show more Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) memory or (2) I/O decoding for a PCI Express device and then accessing the device, which triggers an Unsupported Request (UR) response.Show less
CVE-2013-2186 2Redhat Ubuntu 5Jboss Enterprise Brms Platform Jboss Enterprise Portal PlatformJboss Enterprise Web Server+2 more Apr 29, 2026 Oct 28, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files vi...Show more The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.Show less
CVE-2009-1296 1Ubuntu 273 Oubuntu Ubuntu Apr 23, 2026 Jun 9, 2009 N/A· v4 N/A· v3 1.9 LOW· v2 The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files fro...Show more The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root.Show less
CVE-2009-1295 2Apport Ubuntu 2Apport Ubuntu Apr 23, 2026 Apr 30, 2009 N/A· v4 N/A· v3 1.9 LOW· v2 Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to...Show more Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.Show less