Ubuntu Linux

CVEs (4,123)

• CVE-2018-7740MedMar 7, 2018
  Linux

  Kernel
  risk 0.36cvss 5.5epss 0.01

  The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.

• CVE-2018-1305MedFeb 23, 2018
  Apache

  Tomcat
  risk 0.36cvss 6.5epss 0.14

  Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and…

• CVE-2018-6616MedFeb 4, 2018
  Uclouvain

  Openjpeg
  risk 0.36cvss 5.5epss 0.02

  In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

• CVE-2017-18043MedJan 31, 2018
  QEMU

  Qemu
  risk 0.36cvss 5.5epss 0.00

  Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash).

• CVE-2018-5750MedJan 26, 2018
  Linux

  Kernel
  risk 0.36cvss 5.5epss 0.00

  The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain sensitive address information by reading dmesg data from an SBS HC printk call.

• CVE-2018-2640MedJan 18, 2018
  MariaDB

  MariaDB
  risk 0.36cvss 6.5epss 0.04

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…

• CVE-2017-17820MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors.

• CVE-2017-17819MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.

• CVE-2017-17817MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service attack.

• CVE-2017-17816MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service attack.

• CVE-2017-17815MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts.

• CVE-2017-17814MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service attack.

• CVE-2017-17813MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors.

• CVE-2017-17812MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a remote denial of service attack.

• CVE-2017-17811MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a strcpy in paste_tokens in asm/preproc.c, a similar issue to CVE-2017-11111.

• CVE-2017-17810MedDec 21, 2017
  Nasm

  Netwide Assembler
  risk 0.36cvss 5.5epss 0.01

  In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments.

• CVE-2017-17788MedDec 20, 2017
  GIMP

  Gimp
  risk 0.36cvss 5.5epss 0.01

  In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.

• CVE-2017-17669MedDec 13, 2017
  Exiv2

  Exiv2
  risk 0.36cvss 5.5epss 0.02

  There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

• CVE-2017-16611MedDec 1, 2017
  LibXfont

  libXfont
  risk 0.36cvss 5.5epss 0.00

  In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar mechanisms that can be triggered by opening files.

• CVE-2017-17087MedDec 1, 2017
  Vim

  Vim
  risk 0.36cvss 5.5epss 0.00

  fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership,…