← Back

Canonical

canonical

4,252 CVEs • 60 products

Products (60)

Click to collapse
Toggle
Ubuntu Linux
ubuntu_linux
4,121 CVEs
Lxd
lxd
35 CVEs
Juju
juju
19 CVEs
Apport
apport
17 CVEs
Snapd
snapd
16 CVEs
Cloud Init
cloud-init
9 CVEs
Metal As A Service
metal_as_a_service
5 CVEs
Multipass
multipass
5 CVEs
Accountsservice
accountsservice
4 CVEs
Ubuntu Core
ubuntu_core
4 CVEs
Ubuntu Touch
ubuntu_touch
4 CVEs
Maas
maas
3 CVEs
Subiquity
subiquity
3 CVEs
Landscape
landscape
3 CVEs
Authd
authd
3 CVEs
Update Manager
update-manager
2 CVEs
Software Properties
software-properties
2 CVEs
Acpi Support
acpi-support
2 CVEs
Ubuntu
ubuntu
2 CVEs
Lxcfs
lxcfs
2 CVEs
Unity Firefox Extension
unity-firefox-extension
2 CVEs
Ubuntu Desktop Provision
ubuntu_desktop_provision
2 CVEs
Spread
spread
1 CVE
Php5
php5
1 CVE
Ubuntu Software Properties
ubuntu_software_properties
1 CVE
Telepathy Idle
telepathy-idle
1 CVE
Apt Xapian Index
apt-xapian-index
1 CVE
Libpam Modules
libpam-modules
1 CVE
Ltsp Display Manager
ltsp_display_manager
1 CVE
Reportbug
reportbug
1 CVE
Ubuntu Core Launcher
ubuntu-core-launcher
1 CVE
Openstack Ironic
openstack_ironic
1 CVE
Ubuntu Image
ubuntu-image
1 CVE
Bazaar
bazaar
1 CVE
Screen Resolution Extra
screen-resolution-extra
1 CVE
Selinux
selinux
1 CVE
Ubuntu Download Manager
ubuntu_download_manager
1 CVE
Apparmor
apparmor
1 CVE
Ubuntu Cobbler
ubuntu_cobbler
1 CVE
Microk8s
microk8s
1 CVE
C Kernel
c-kernel
1 CVE
Trust Store (ubuntu)
trust-store_(ubuntu)
1 CVE
Trust Store (ubuntu Rtm)
trust-store_(ubuntu_rtm)
1 CVE
Whoopsie
whoopsie
1 CVE
Checkinstall
checkinstall
1 CVE
Ppp
ppp
1 CVE
Add Apt Repository
add-apt-repository
1 CVE
Ubuntu Ui Toolkit
ubuntu-ui-toolkit
1 CVE
Snapcraft
snapcraft
1 CVE
Remote Login Service
remote-login-service
1 CVE
Ubuntu Pipewire Pulse
ubuntu_pipewire-pulse
1 CVE
Pebble
pebble
1 CVE
Netplan
netplan
1 CVE
Ubuntu Advantage Desktop Daemon
ubuntu_advantage_desktop_daemon
1 CVE
Anbox Cloud
anbox_cloud
1 CVE
Linux Bluefield
linux-bluefield
1 CVE
Juju/utils
juju/utils
1 CVE
Ubuntu Subiquity
ubuntu_subiquity
1 CVE
Pdfunite
pdfunite
1 CVE
Livepatch Client
livepatch_client
1 CVE

CVEs (4,252)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-7045
3Canonical
DebianIrssi
3Debian Linux
IrssiUbuntu Linux
May 6, 2026
Sep 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
CVE-2016-7044
3Canonical
DebianIrssi
3Debian Linux
IrssiUbuntu Linux
May 6, 2026
Sep 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomple...Show more
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.Show less
CVE-2016-6306
6Canonical
DebianHp+3 more
9Debian Linux
Icewall Federation AgentIcewall Mcrp+6 more
May 6, 2026
Sep 26, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr....Show more
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.Show less
CVE-2016-7162
2Canonical
File Roller Project
2File Roller
Ubuntu Linux
May 6, 2026
Sep 26, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
CVE-2015-8934
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.
CVE-2015-8933
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.
CVE-2015-8932
4Canonical
DebianLibarchive+1 more
6Debian Linux
LibarchiveLinux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left s...Show more
The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.Show less
CVE-2015-8931
4Canonical
DebianLibarchive+1 more
6Debian Linux
LibarchiveLinux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtre...Show more
Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.Show less
CVE-2015-8930
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.
CVE-2015-8928
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
CVE-2015-8926
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.
CVE-2015-8925
3Canonical
LibarchiveSuse
5Libarchive
Linux Enterprise DesktopLinux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid read) via a crafted mtree file, related to newline parsing.
CVE-2015-8924
3Canonical
LibarchiveNovell
5Libarchive
Suse Linux Enterprise DesktopSuse Linux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.
CVE-2015-8923
3Canonical
LibarchiveNovell
5Libarchive
Suse Linux Enterprise DesktopSuse Linux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via a crafted zip file.
CVE-2015-8922
4Canonical
LibarchiveNovell+1 more
6Libarchive
LinuxSuse Linux Enterprise Desktop+3 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to th...Show more
The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.Show less
CVE-2015-8921
3Canonical
LibarchiveNovell
5Libarchive
Suse Linux Enterprise DesktopSuse Linux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.
CVE-2015-8920
3Canonical
LibarchiveNovell
5Libarchive
Suse Linux Enterprise DesktopSuse Linux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds stack read) via a crafted ar file.
CVE-2015-8919
3Canonical
LibarchiveNovell
5Libarchive
Suse Linux Enterprise DesktopSuse Linux Enterprise Server+2 more
May 6, 2026
Sep 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The lha_read_file_extended_header function in archive_read_support_format_lha.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds heap) via a crafted (1) lzh or (2) lha file.
CVE-2015-8917
3Canonical
DebianLibarchive
3Debian Linux
LibarchiveUbuntu Linux
May 6, 2026
Sep 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid character in the name of a cab file.
CVE-2015-8916
3Canonical
DebianLibarchive
3Debian Linux
LibarchiveUbuntu Linux
May 6, 2026
Sep 20, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereferenc...Show more
bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted rar file.Show less