Ubuntu Linux

CVEs (1,886)

• CVE-2015-1819Aug 14, 2015
  Apple Inc.

  Mac OS X
  risk 0.01cvss —epss 0.06

  The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.

• CVE-2015-4757Jul 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

• CVE-2015-3279Jul 14, 2015
  Openprinting

  cups-filters
  risk 0.01cvss —epss 0.07

  Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.

• CVE-2015-3258Jul 14, 2015
  Openprinting

  cups-filters
  risk 0.01cvss —epss 0.08

  Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.

• CVE-2015-3209Jun 15, 2015
  QEMU

  Qemu
  risk 0.01cvss —epss 0.10

  Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

• CVE-2015-4004Jun 7, 2015
  Linux

  Kernel
  risk 0.01cvss —epss 0.08

  The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.

• CVE-2015-4047May 29, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.10

  racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

• CVE-2015-3165May 28, 2015
  PostgreSQL

  PostgreSQL
  risk 0.01cvss —epss 0.09

  Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause a denial of service (crash) by closing an SSL session at a time when the authentication timeout will…

• CVE-2015-3153May 1, 2015
  Curl

  Curl
  risk 0.01cvss —epss 0.08

  The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

• CVE-2015-1774Apr 28, 2015
  Apache

  Openoffice
  risk 0.01cvss —epss 0.08

  The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

• CVE-2015-3148Apr 24, 2015
  Curl

  Curl
  risk 0.01cvss —epss 0.18

  cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.

• CVE-2015-3144Apr 24, 2015
  Curl

  Curl
  risk 0.01cvss —epss 0.11

  The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) or possibly have other unspecified impact via a zero-length host name, as…

• CVE-2015-3143Apr 24, 2015
  Curl

  Curl
  risk 0.01cvss —epss 0.16

  cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.

• CVE-2015-2568Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.

• CVE-2015-0501Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.

• CVE-2015-2775Apr 13, 2015
  GNU

  Mailman
  risk 0.01cvss —epss 0.08

  Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.

• CVE-2015-2806Apr 10, 2015
  GNU

  Libtasn1
  risk 0.01cvss —epss 0.08

  Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

• CVE-2015-2305Mar 30, 2015
  Henry Spencer

  rxspencer
  risk 0.01cvss —epss 0.08

  Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular…

• CVE-2015-2301Mar 30, 2015
  PHP

  PHP
  risk 0.01cvss —epss 0.15

  Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar…

• CVE-2014-9709Mar 30, 2015
  PHP

  PHP
  risk 0.01cvss —epss 0.16

  The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the…