Canonical

Ubuntu Linux

4106 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2011-4600

  • EPSS 0.31%
  • Veröffentlicht 14.04.2016 15:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restriction...

7.5

CVE-2015-8560

  • EPSS 10.03%
  • Veröffentlicht 14.04.2016 14:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different...

5.9

CVE-2016-0739

  • EPSS 4.31%
  • Veröffentlicht 13.04.2016 17:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH ...

7.5

CVE-2015-8806

  • EPSS 6.05%
  • Veröffentlicht 13.04.2016 17:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

7.5

CVE-2015-3146

  • EPSS 2.85%
  • Veröffentlicht 13.04.2016 17:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted S...

8.8

CVE-2016-3982

  • EPSS 2.21%
  • Veröffentlicht 13.04.2016 16:59:24
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, whi...

9.3

CVE-2016-3981

Exploit
  • EPSS 0.95%
  • Veröffentlicht 13.04.2016 16:59:23
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image ...

6.5

CVE-2016-2191

Exploit
  • EPSS 2.06%
  • Veröffentlicht 13.04.2016 16:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

4.4

CVE-2015-8552

  • EPSS 0.16%
  • Veröffentlicht 13.04.2016 15:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption)...

9.8

CVE-2015-7545

  • EPSS 34.73%
  • Veröffentlicht 13.04.2016 15:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execut...