Canonical

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-15032 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Oct 5, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVE-2017-15017 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Oct 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
CVE-2017-15016 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Oct 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
CVE-2017-15015 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Oct 5, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.
CVE-2017-14491 12Arista ArubanetworksCanonical+9 more 21Arubaos Debian LinuxDiskstation Manager+18 more May 13, 2026 Oct 4, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVE-2017-12617 6Apache CanonicalDebian+3 more 58Active Iq Unified Manager Agile PlmCommunications Instant Messaging Server+55 more Apr 21, 2026 Oct 4, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to fal...Show more When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.Show less
CVE-2017-14496 6Canonical DebianGoogle+3 more 8Android Debian LinuxDnsmasq+5 more May 13, 2026 Oct 3, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS req...Show more Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service via a crafted DNS request.Show less
CVE-2017-14495 4Canonical DebianRedhat+1 more 6Debian Linux DnsmasqEnterprise Linux Desktop+3 more May 13, 2026 Oct 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creat...Show more Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.Show less
CVE-2017-14494 5Canonical DebianNovell+2 more 7Debian Linux DnsmasqEnterprise Linux Desktop+4 more May 13, 2026 Oct 3, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.
CVE-2017-14493 5Canonical DebianOpensuse+2 more 7Debian Linux DnsmasqEnterprise Linux Desktop+4 more May 13, 2026 Oct 3, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.
CVE-2017-14492 4Canonical DebianRedhat+1 more 6Debian Linux DnsmasqEnterprise Linux Desktop+3 more May 13, 2026 Oct 3, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.
CVE-2017-13704 6Canonical DebianFedoraproject+3 more 8Debian Linux DnsmasqEnterprise Linux Desktop+5 more May 13, 2026 Oct 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xff...Show more In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0xffffffff zero's (0xffffffffffffffff in 64 bit platforms), making dnsmasq crash.Show less
CVE-2017-14864 3Canonical DebianExiv2 3Debian Linux Exiv2Ubuntu Linux May 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2017-14862 3Canonical DebianExiv2 3Debian Linux Exiv2Ubuntu Linux May 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2017-14859 3Canonical DebianExiv2 3Debian Linux Exiv2Ubuntu Linux May 13, 2026 Sep 29, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2017-12153 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux May 13, 2026 Sep 21, 2017 N/A· v4 4.4 MEDIUM· v3 4.9 MEDIUM· v2 A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink...Show more A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.Show less
CVE-2017-14633 3Canonical DebianXiph.org 3Debian Linux LibvorbisUbuntu Linux May 13, 2026 Sep 21, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().
CVE-2017-14632 3Canonical DebianXiph.org 3Debian Linux LibvorbisUbuntu Linux May 13, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
CVE-2017-14626 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
CVE-2017-14625 2Canonical Imagemagick 2Imagemagick Ubuntu Linux May 13, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.

Previous 1...122123124...212 Next