Ubuntu Linux
by Canonical
CVEs (4,123)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-47334 | Med | 0.36 | 5.5 | 0.00 | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivileged local user and can result in kernel panic or deadlock. | ||
| CVE-2026-47332 | Med | 0.36 | 5.5 | 0.00 | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information… | ||
| CVE-2026-47326 | Med | 0.36 | 5.5 | 0.00 | May 28, 2026 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user. The memory leak could lead to resource exhaustion. | ||
| CVE-2022-1804 | Med | 0.36 | 5.5 | 0.00 | Mar 25, 2025 | accountsservice no longer drops permissions when writting .pam_environment | ||
| CVE-2022-28658 | Med | 0.36 | 5.5 | 0.00 | Jun 4, 2024 | Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing | ||
| CVE-2022-28656 | Med | 0.36 | 5.5 | 0.00 | Jun 4, 2024 | is_closing_session() allows users to consume RAM in the Apport process | ||
| CVE-2022-28654 | Med | 0.36 | 5.5 | 0.00 | Jun 4, 2024 | is_closing_session() allows users to fill up apport.log | ||
| CVE-2022-28652 | Med | 0.36 | 5.5 | 0.00 | Jun 4, 2024 | ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack | ||
| CVE-2022-1184 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service. | ||
| CVE-2021-4115 | Med | 0.36 | 5.5 | 0.01 | Feb 21, 2022 | There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and… | ||
| CVE-2020-29385 | Med | 0.36 | 5.5 | 0.01 | Dec 26, 2020 | GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign the value 11 to c. The next execution in the loop will assign… | ||
| CVE-2020-27349 | Med | 0.36 | 5.5 | 0.00 | Dec 9, 2020 | Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5. | ||
| CVE-2020-14392 | Med | 0.36 | 5.5 | 0.01 | Sep 16, 2020 | An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability. | ||
| CVE-2020-17538 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. | ||
| CVE-2020-16310 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. | ||
| CVE-2020-16309 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This is fixed in v9.51. | ||
| CVE-2020-16308 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. | ||
| CVE-2020-16307 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51. | ||
| CVE-2020-16306 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51. | ||
| CVE-2020-16305 | Med | 0.36 | 5.5 | 0.02 | Aug 13, 2020 | A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. |
- risk 0.36cvss 5.5epss 0.00
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code. The bug can be triggered by an unprivileged local user and can result in kernel panic or deadlock.
- risk 0.36cvss 5.5epss 0.00
Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notification handling code. The bug can be triggered by an unprivileged local user and can result in information…
- risk 0.36cvss 5.5epss 0.00
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be triggered by an unprivileged local user. The memory leak could lead to resource exhaustion.
- risk 0.36cvss 5.5epss 0.00
accountsservice no longer drops permissions when writting .pam_environment
- risk 0.36cvss 5.5epss 0.00
Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
- risk 0.36cvss 5.5epss 0.00
is_closing_session() allows users to consume RAM in the Apport process
- risk 0.36cvss 5.5epss 0.00
is_closing_session() allows users to fill up apport.log
- risk 0.36cvss 5.5epss 0.00
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
- risk 0.36cvss 5.5epss 0.00
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.
- risk 0.36cvss 5.5epss 0.01
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and…
- risk 0.36cvss 5.5epss 0.01
GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign the value 11 to c. The next execution in the loop will assign…
- risk 0.36cvss 5.5epss 0.00
Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.
- risk 0.36cvss 5.5epss 0.01
An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability.
- risk 0.36cvss 5.5epss 0.02
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
- risk 0.36cvss 5.5epss 0.02
A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
- risk 0.36cvss 5.5epss 0.02
A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This is fixed in v9.51.
- risk 0.36cvss 5.5epss 0.02
A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
- risk 0.36cvss 5.5epss 0.02
A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.
- risk 0.36cvss 5.5epss 0.02
A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.
- risk 0.36cvss 5.5epss 0.02
A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
Page 89 of 207