UL
Product
Ubuntu Linux
64
CVEs
0
On KEV
5.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch
Add Ubuntu Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0109 | 5.6 | Mar 5 | Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to… Affected: 4.1; 4.1; 5.04; 5.04; 5.04 |
| CVE-2006-5648 | 5.5 | Dec 14 | Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list… Affected: 6.10 |
| CVE-2006-5649 | 5.5 | Dec 14 | Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service… Affected: 5.10; 6.06_lts; 6.10 |
| CVE-2010-0834 | – | Aug 10 | The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require… Affected: 9.10; 10.04 |
| CVE-2009-0578 | – | Mar 5 | GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network… Affected: 8.10 |
| CVE-2009-0365 | – | Mar 5 | nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared… Affected: 6.06; 7.10; 8.04; 8.10 |
| CVE-2007-5365 | – | Oct 11 | Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote… Affected: 6.06; 6.10; 7.04; 7.10 |
| CVE-2007-4601 | – | Aug 30 | A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a service uses libwrap but does not specify… Affected: 7.04 |
| CVE-2007-1351 | – | Apr 6 | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to… Affected: 5.10; 5.10; 5.10; 5.10; 6.06_lts; 6.06_lts; +6 more |
| CVE-2007-1352 | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… Affected: 4.1; 4.1; 4.1; 5.10; 5.10; 5.10; +9 more |
| CVE-2006-6235 | – | Dec 7 | A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP… Affected: 5.10; 6.06 |
| CVE-2006-5466 | – | Nov 6 | Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow… Affected: 6.06_lts; 6.10 |
| CVE-2006-3597 | – | Jul 18 | passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation… Affected: 6.06_lts |
| CVE-2006-3378 | – | Jul 6 | passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users… Affected: 5.04; 5.04; 5.04; 5.10; 5.10; 5.10; +5 more |
| CVE-2006-1183 | – | Mar 13 | The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world-readable permissions, which allows… Affected: 5.10 |
| CVE-2006-0151 | – | Jan 9 | sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of… Affected: 4.1; 4.1; 5.04; 5.04; 5.04; 5.10; +2 more |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 4.1; 4.1; 5.04; 5.04; 5.04; 5.10; +2 more |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 4.1; 4.1; 5.04; 5.04; 5.04; 5.10; +2 more |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 4.1; 4.1; 5.04; 5.04; 5.04; 5.10; +2 more |
| CVE-2005-0106 | – | May 3 | SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the… Affected: 5.04 |
| CVE-2005-0988 | – | May 2 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file… Affected: 4.1; 4.1; 5.04; 5.04; 5.04 |
| CVE-2005-0080 | – | May 2 | The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list,… Affected: 4.10 |
| CVE-2005-0077 | – | May 2 | The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file Affected: 4.10 |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 4.1; 4.1 |
| CVE-2005-0754 | – | Apr 22 | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code Affected: 4.1; 4.1; 5.04; 5.04; 5.04 |
| CVE-2004-1235 | – | Apr 14 | Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute… Affected: 4.1; 4.1 |
| CVE-2005-0750 | – | Mar 27 | The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or… Affected: 4.1; 4.1 |
| CVE-2005-0384 | – | Mar 15 | Unknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via a pppd client Affected: 4.10 |
| CVE-2004-0983 | – | Mar 1 | The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request Affected: 4.1; 4.1 |
| CVE-2004-0989 | – | Mar 1 | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is… Affected: 4.1; 4.1 |
| CVE-2004-1007 | – | Mar 1 | The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF)… Affected: 4.1; 4.1 |
| CVE-2004-1051 | – | Mar 1 | sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within… Affected: 4.1; 4.1 |
| CVE-2004-0969 | – | Feb 9 | The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to… Affected: 4.1; 4.1 |
| CVE-2004-0966 | – | Feb 9 | The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems,… Affected: 4.1; 4.1 |
| CVE-2004-0957 | – | Feb 9 | Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases… Affected: 4.1; 4.1 |
| CVE-2005-0156 | – | Feb 7 | Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG… Affected: 4.1; 4.1 |
| CVE-2004-0882 | – | Jan 27 | Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a… Affected: 4.1; 4.1 |
| CVE-2004-0888 | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… Affected: 4.1; 4.1 |
| CVE-2004-0918 | – | Jan 27 | The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via… Affected: 4.1; 4.1 |
| CVE-2004-0891 | – | Jan 27 | Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via… Affected: 4.1; 4.1 |
| CVE-2004-0889 | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: 4.1; 4.1 |
| CVE-2004-1058 | – | Jan 10 | Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline Affected: 4.1; 4.1 |
| CVE-2004-1151 | – | Jan 10 | Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain… Affected: 4.1; 4.1 |
| CVE-2004-1137 | – | Jan 10 | Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute… Affected: 4.1; 4.1 |
| CVE-2004-1069 | – | Jan 10 | Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled… Affected: 4.1; 4.1 |
| CVE-2004-1068 | – | Jan 10 | A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition Affected: 4.1; 4.1 |
| CVE-2004-1067 | – | Jan 10 | Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code… Affected: 4.1; 4.1 |
| CVE-2004-1065 | – | Jan 10 | Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image… Affected: 4.1; 4.1 |
| CVE-2004-1013 | – | Jan 10 | The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1)… Affected: 4.1; 4.1 |
| CVE-2004-1012 | – | Jan 10 | The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that… Affected: 4.1; 4.1 |