← Back

Canonical

canonical

4,238 CVEs • 60 products

Products (60)

Click to collapse
Toggle
Ubuntu Linux
ubuntu_linux
4,120 CVEs
Lxd
lxd
22 CVEs
Juju
juju
19 CVEs
Apport
apport
17 CVEs
Snapd
snapd
16 CVEs
Cloud Init
cloud-init
9 CVEs
Metal As A Service
metal_as_a_service
5 CVEs
Multipass
multipass
5 CVEs
Accountsservice
accountsservice
4 CVEs
Ubuntu Core
ubuntu_core
4 CVEs
Ubuntu Touch
ubuntu_touch
4 CVEs
Maas
maas
3 CVEs
Subiquity
subiquity
3 CVEs
Landscape
landscape
3 CVEs
Authd
authd
3 CVEs
Update Manager
update-manager
2 CVEs
Software Properties
software-properties
2 CVEs
Acpi Support
acpi-support
2 CVEs
Ubuntu
ubuntu
2 CVEs
Lxcfs
lxcfs
2 CVEs
Unity Firefox Extension
unity-firefox-extension
2 CVEs
Ubuntu Desktop Provision
ubuntu_desktop_provision
2 CVEs
Spread
spread
1 CVE
Php5
php5
1 CVE
Ubuntu Software Properties
ubuntu_software_properties
1 CVE
Telepathy Idle
telepathy-idle
1 CVE
Apt Xapian Index
apt-xapian-index
1 CVE
Libpam Modules
libpam-modules
1 CVE
Ltsp Display Manager
ltsp_display_manager
1 CVE
Reportbug
reportbug
1 CVE
Ubuntu Core Launcher
ubuntu-core-launcher
1 CVE
Openstack Ironic
openstack_ironic
1 CVE
Ubuntu Image
ubuntu-image
1 CVE
Bazaar
bazaar
1 CVE
Screen Resolution Extra
screen-resolution-extra
1 CVE
Selinux
selinux
1 CVE
Ubuntu Download Manager
ubuntu_download_manager
1 CVE
Apparmor
apparmor
1 CVE
Ubuntu Cobbler
ubuntu_cobbler
1 CVE
Microk8s
microk8s
1 CVE
C Kernel
c-kernel
1 CVE
Trust Store (ubuntu)
trust-store_(ubuntu)
1 CVE
Trust Store (ubuntu Rtm)
trust-store_(ubuntu_rtm)
1 CVE
Whoopsie
whoopsie
1 CVE
Checkinstall
checkinstall
1 CVE
Ppp
ppp
1 CVE
Add Apt Repository
add-apt-repository
1 CVE
Ubuntu Ui Toolkit
ubuntu-ui-toolkit
1 CVE
Snapcraft
snapcraft
1 CVE
Remote Login Service
remote-login-service
1 CVE
Ubuntu Pipewire Pulse
ubuntu_pipewire-pulse
1 CVE
Pebble
pebble
1 CVE
Netplan
netplan
1 CVE
Ubuntu Advantage Desktop Daemon
ubuntu_advantage_desktop_daemon
1 CVE
Anbox Cloud
anbox_cloud
1 CVE
Linux Bluefield
linux-bluefield
1 CVE
Juju/utils
juju/utils
1 CVE
Ubuntu Subiquity
ubuntu_subiquity
1 CVE
Pdfunite
pdfunite
1 CVE
Livepatch Client
livepatch_client
1 CVE

CVEs (4,238)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-7795
2Canonical
Systemd Project
2Systemd
Ubuntu Linux
May 6, 2026
Oct 13, 2016
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
CVE-2016-7117
3Canonical
DebianLinux
3Debian Linux
Linux KernelUbuntu Linux
May 6, 2026
Oct 10, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl...Show more
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.Show less
CVE-2016-7401
3Canonical
DebianDjangoproject
3Debian Linux
DjangoUbuntu Linux
May 6, 2026
Oct 3, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
CVE-2016-6352
3Canonical
GnomeOpensuse
4Gdk Pixbuf
LeapOpensuse+1 more
May 6, 2026
Oct 3, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
CVE-2016-1372
2Canonical
Clamav
2Clamav
Ubuntu Linux
May 6, 2026
Oct 3, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file.
CVE-2016-1371
2Canonical
Clamav
2Clamav
Ubuntu Linux
May 6, 2026
Oct 3, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable.
CVE-2016-5180
5C Ares
C Ares ProjectCanonical+2 more
5C Ares
C AresDebian Linux+2 more
May 6, 2026
Oct 3, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with a...Show more
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.Show less
CVE-2016-7045
3Canonical
DebianIrssi
3Debian Linux
IrssiUbuntu Linux
May 6, 2026
Sep 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
CVE-2016-7044
3Canonical
DebianIrssi
3Debian Linux
IrssiUbuntu Linux
May 6, 2026
Sep 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomple...Show more
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.Show less
CVE-2016-6306
6Canonical
DebianHp+3 more
9Debian Linux
Icewall Federation AgentIcewall Mcrp+6 more
May 6, 2026
Sep 26, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr....Show more
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.Show less
CVE-2016-7162
2Canonical
File Roller Project
2File Roller
Ubuntu Linux
May 6, 2026
Sep 26, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
CVE-2015-8934
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
CVE-2015-8933
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
CVE-2015-8932
4Canonical
DebianLibarchive+1 more
6Debian Linux
LibarchiveLinux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left s...Show more
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.Show less
CVE-2015-8931
4Canonical
DebianLibarchive+1 more
6Debian Linux
LibarchiveLinux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtre...Show more
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.Show less
CVE-2015-8930
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
CVE-2015-8928
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
CVE-2015-8926
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.
CVE-2015-8925
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.
CVE-2015-8924
3Canonical
LibarchiveNovell
5Libarchive
Suse Linux Enterprise DesktopSuse Linux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.