CL
Vendor
Canonical Ltd.
39
CVEs
0
On KEV
0
New 30D
Products
AP7.8
Apport
Canonical Ltd.
10 CVEs0 on KEV0 new
JU8.0
Juju
Canonical Ltd.
5 CVEs0 on KEV0 new
LA8.2
Landscape
Canonical Ltd.
3 CVEs0 on KEV0 new
LX6.7
LXD
Canonical Ltd.
3 CVEs0 on KEV0 new
SN8.8
snapd
Canonical Ltd.
3 CVEs0 on KEV0 new
AU8.8
Authd
Canonical Ltd.
2 CVEs0 on KEV0 new
SU8.4
subiquity
Canonical Ltd.
2 CVEs0 on KEV0 new
UG9.8
Ubuntu's gnome-control-center
Canonical Ltd.
2 CVEs0 on KEV0 new
AC7.5
Anbox Cloud
Canonical Ltd.
1 CVEs0 on KEV0 new
NE6.5
Netplan
Canonical Ltd.
1 CVEs0 on KEV0 new
PE6.5
Pebble
Canonical Ltd.
1 CVEs0 on KEV0 new
UA5.5
Ubuntu Advantage Desktop Pro
Canonical Ltd.
1 CVEs0 on KEV0 new
UD7.8
Ubuntu Desktop Provision
Canonical Ltd.
1 CVEs0 on KEV0 new
UE6.7
Ubuntu EDK II
Canonical Ltd.
1 CVEs0 on KEV0 new
UP5.5
Ubuntu pipewire-pulse
Canonical Ltd.
1 CVEs0 on KEV0 new
UP4.0
Ubuntu's pulseaudio
Canonical Ltd.
1 CVEs0 on KEV0 new
WP7.8
wpa_supplicant
Canonical Ltd.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-5616 | UG Ubuntu's gnome-control-center Canonical Ltd. | 4.9 | Apr 15 | In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server |
| CVE-2023-0092 | JU Juju Canonical Ltd. | 4.9 | Jan 31 | An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem |
| CVE-2022-1736 | UG Ubuntu's gnome-control-center Canonical Ltd. | 9.8 | Jan 31 | Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default |
| CVE-2020-11936 | AP Apport Canonical Ltd. | 3.1 | Jan 31 | gdbus setgid privilege escalation |
| CVE-2022-28653 | AP Apport Canonical Ltd. | 7.5 | Jan 31 | Users can consume unlimited disk space in /var/crash |
| CVE-2024-6219 | LX LXD Canonical Ltd. | 3.8 | Dec 5 | Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured |
| CVE-2024-6156 | LX LXD Canonical Ltd. | 3.8 | Dec 5 | Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store |
| CVE-2024-11586 | UP Ubuntu's pulseaudio Canonical Ltd. | 4.0 | Nov 23 | Ubuntu's implementation of pulseaudio can be crashed by a malicious program if a bluetooth headset is connected |
| CVE-2024-9312 | AU Authd Canonical Ltd. | 6.4 | Oct 10 | Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions |
| CVE-2024-9313 | AU Authd Canonical Ltd. | 8.8 | Oct 3 | Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including… |
| CVE-2024-8038 | JU Juju Canonical Ltd. | 5.5 | Oct 2 | Vulnerable juju introspection abstract UNIX domain socket |
| CVE-2024-8037 | JU Juju Canonical Ltd. | 6.5 | Oct 2 | Vulnerable juju hook tool abstract UNIX domain socket |
| CVE-2024-7558 | JU Juju Canonical Ltd. | 8.0 | Oct 2 | JUJU_CONTEXT_ID is a predictable authentication secret |
| CVE-2024-8287 | AC Anbox Cloud Canonical Ltd. | 7.5 | Sep 18 | Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent |
| CVE-2024-5290 | WP wpa_supplicant Canonical Ltd. | 7.8 | Aug 7 | An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the… |
| CVE-2024-6984 | JU Juju Canonical Ltd. | 3.8 | Jul 29 | An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation… |
| CVE-2024-6714 | UD Ubuntu Desktop Provision Canonical Ltd. | 7.8 | Jul 23 | An issue was discovered in provd before version 0.1.5 with a setuid binary, which allows a local attacker to escalate their privilege |
| CVE-2024-6388 | UA Ubuntu Advantage Desktop Pro Canonical Ltd. | 5.5 | Jun 27 | Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext |
| CVE-2020-27352 | SN snapd Canonical Ltd. | 8.8 | Jun 21 | When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the… |
| CVE-2022-4968 | NE Netplan Canonical Ltd. | 6.5 | Jun 7 | netplan leaks the private key of wireguard to local users |
| CVE-2022-28658 | AP Apport Canonical Ltd. | 5.5 | Jun 4 | Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing |
| CVE-2022-28657 | AP Apport Canonical Ltd. | 7.8 | Jun 4 | Apport does not disable python crash handler before entering chroot |
| CVE-2022-28656 | AP Apport Canonical Ltd. | 5.5 | Jun 4 | is_closing_session() allows users to consume RAM in the Apport process |
| CVE-2022-28655 | AP Apport Canonical Ltd. | 7.1 | Jun 4 | is_closing_session() allows users to create arbitrary tcp dbus connections |
| CVE-2022-28654 | AP Apport Canonical Ltd. | 5.5 | Jun 4 | is_closing_session() allows users to fill up apport.log |
| CVE-2022-28652 | AP Apport Canonical Ltd. | 5.5 | Jun 4 | ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack |
| CVE-2022-1242 | AP Apport Canonical Ltd. | 7.8 | Jun 3 | Apport can be tricked into connecting to arbitrary sockets as the root user |
| CVE-2021-3899 | AP Apport Canonical Ltd. | 7.8 | Jun 3 | There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root |
| CVE-2022-0555 | SU subiquity Canonical Ltd. | 8.4 | Jun 3 | Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions |
| CVE-2024-5138 | SN snapd Canonical Ltd. | 8.1 | May 31 | The snapctl component within snapd allows a confined snap to interact with the snapd daemon to take certain privileged actions on behalf of the snap |
| CVE-2024-3250 | PE Pebble Canonical Ltd. | 6.5 | Apr 4 | It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with… |
| CVE-2023-49721 | LX LXD Canonical Ltd. | 6.7 | Feb 14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD |
| CVE-2023-48733 | UE Ubuntu EDK II Canonical Ltd. | 6.7 | Feb 14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2 |
| CVE-2022-4964 | UP Ubuntu pipewire-pulse Canonical Ltd. | 5.5 | Jan 24 | Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set |
| CVE-2022-3328 | SN snapd Canonical Ltd. | 7.0 | Jan 8 | Race condition in snap-confine's must_mkdir_and_open_with_perms() |
| CVE-2023-5182 | SU subiquity Canonical Ltd. | 5.5 | Oct 6 | Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier |
| CVE-2023-32551 | LA Landscape Canonical Ltd. | 6.1 | Jun 6 | Landscape Open Redirect |
| CVE-2023-32550 | LA Landscape Canonical Ltd. | 8.2 | Jun 6 | Landscape's Apache server-status is accessible by default |
| CVE-2023-32549 | LA Landscape Canonical Ltd. | 7.5 | Jun 6 | Landscape insecure token generation |
| CVE-2023-2612 | UB ubuntu-linux Canonical Ltd. | 4.7 | May 30 | shiftfs lock unbalance in Ubuntu-specific kernels |