8.04 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-4564			DoS Exec Code Overflow	2012-11-11	2020-11-12	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.
2	CVE-2011-1017	787		Overflow +Priv +Info	2011-03-01	2020-08-07	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel 2.6.37.2 and earlier might allow local users to gain privileges or obtain sensitive information via a crafted LDM partition table.
3	CVE-2011-1012	369		DoS	2011-03-01	2020-08-11	4.9	None	Local	Low	Not required	None	None	Complete
The ldm_parse_vmdb function in fs/partitions/ldm.c in the Linux kernel before 2.6.38-rc6-git6 does not validate the VBLK size value in the VMDB structure in an LDM partition table, which allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted partition table.
4	CVE-2011-0762	400	1	DoS	2011-03-02	2021-03-04	4.0	None	Remote	Low	???	None	None	Partial
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.
5	CVE-2011-0712	120		DoS Overflow	2011-02-18	2020-08-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
6	CVE-2011-0695	362		DoS	2011-03-15	2020-08-11	5.7	None	Local Network	Medium	Not required	None	None	Complete
Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand request while other request handlers are still running, which triggers an invalid pointer dereference.
7	CVE-2011-0480	120		DoS Overflow Mem. Corr.	2011-01-14	2020-07-24	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
8	CVE-2010-4656	787		DoS Overflow +Priv	2011-07-18	2020-08-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The iowarrior_write function in drivers/usb/misc/iowarrior.c in the Linux kernel before 2.6.37 does not properly allocate memory, which might allow local users to trigger a heap-based buffer overflow, and consequently cause a denial of service or gain privileges, via a long report.
9	CVE-2010-4655	665		+Info	2011-07-18	2020-08-14	2.1	None	Local	Low	Not required	Partial	None	None
net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.
10	CVE-2010-4253	787		DoS Exec Code Overflow	2011-01-28	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.
11	CVE-2010-3904	20		+Priv	2010-12-06	2020-08-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
12	CVE-2010-3850			Bypass	2010-12-30	2020-08-14	2.1	None	Local	Low	Not required	None	Partial	None
The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
13	CVE-2010-3849	476		DoS	2010-12-30	2020-08-14	4.7	None	Local	Medium	Not required	None	None	Complete
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
14	CVE-2010-3848	787		Overflow +Priv	2010-12-30	2020-08-14	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.
15	CVE-2010-3705	400		DoS Mem. Corr.	2010-11-26	2020-08-10	8.3	None	Local Network	Low	Not required	Complete	Complete	Complete
The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array.
16	CVE-2010-3702	476		DoS	2010-11-05	2020-12-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.
17	CVE-2010-3689	22		+Priv Dir. Trav.	2011-01-28	2022-02-07	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
soffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
18	CVE-2010-3477	399		+Info	2010-09-21	2020-08-14	2.1	None	Local	Low	Not required	Partial	None	None
The tcf_act_police_dump function in net/sched/act_police.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel memory via vectors involving a dump operation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2942.
19	CVE-2010-3453	787		DoS Exec Code	2011-01-28	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.
20	CVE-2010-3442	190		DoS Overflow Mem. Corr.	2010-10-04	2020-08-10	4.7	None	Local	Medium	Not required	None	None	Complete
Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted (1) SNDRV_CTL_IOCTL_ELEM_ADD or (2) SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl call.
21	CVE-2010-3437	476	1	DoS +Info	2010-10-04	2020-08-13	6.6	None	Local	Low	Not required	Complete	None	Complete
Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.
22	CVE-2010-3432	20		DoS	2010-11-22	2020-08-14	7.8	None	Remote	Low	Not required	None	None	Complete
The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.
23	CVE-2010-3080	415		DoS	2010-09-21	2020-08-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Double free vulnerability in the snd_seq_oss_open function in sound/core/seq/oss/seq_oss_init.c in the Linux kernel before 2.6.36-rc4 might allow local users to cause a denial of service or possibly have unspecified other impact via an unsuccessful attempt to open the /dev/sequencer device.
24	CVE-2010-3067	190		DoS Overflow	2010-09-21	2020-08-14	4.9	None	Local	Low	Not required	None	None	Complete
Integer overflow in the do_io_submit function in fs/aio.c in the Linux kernel before 2.6.36-rc4-next-20100915 allows local users to cause a denial of service or possibly have unspecified other impact via crafted use of the io_submit system call.
25	CVE-2010-2963	20		+Priv	2010-11-26	2020-08-14	6.2	None	Local	High	Not required	Complete	Complete	Complete
drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.
26	CVE-2010-2955	193		+Info	2010-09-08	2020-08-14	2.1	None	Local	Low	Not required	Partial	None	None
The cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6.36-rc3-next-20100831 does not properly initialize certain structure members, which allows local users to leverage an off-by-one error in the ioctl_standard_iw_point function in net/wireless/wext-core.c, and obtain potentially sensitive information from kernel heap memory, via vectors involving an SIOCGIWESSID ioctl call that specifies a large buffer size.
27	CVE-2010-2954	476		DoS	2010-09-03	2020-08-06	4.9	None	Local	Low	Not required	None	None	Complete
The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket.
28	CVE-2010-2807	681		DoS Exec Code	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
29	CVE-2010-2806	129		DoS Exec Code Overflow	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.
30	CVE-2010-2805	20		DoS Exec Code	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
31	CVE-2010-2541	120		DoS Exec Code Overflow	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
32	CVE-2010-2527	120		DoS Exec Code Overflow	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
33	CVE-2010-2520	787		DoS Exec Code Overflow	2010-08-19	2021-03-23	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
34	CVE-2010-2519	787		DoS Exec Code Overflow	2010-08-19	2021-03-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.
35	CVE-2010-2500	190		DoS Exec Code Overflow	2010-08-19	2021-03-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
36	CVE-2010-2499	120		DoS Exec Code Overflow	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.
37	CVE-2010-2498	787		DoS Exec Code Mem. Corr.	2010-08-19	2021-04-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.
38	CVE-2010-2478	190		DoS Overflow	2010-09-29	2020-08-07	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.33.7 on 32-bit platforms allows local users to cause a denial of service or possibly have unspecified other impact via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value that triggers a buffer overflow, a different vulnerability than CVE-2010-3084.
39	CVE-2010-2226	200		+Info	2010-09-03	2020-08-06	2.1	None	Local	Low	Not required	Partial	None	None
The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write access and obtain read access by swapping one file into another file.
40	CVE-2010-2008	77		DoS	2010-07-13	2020-11-09	3.5	None	Remote	Medium	???	None	None	Partial
MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.
41	CVE-2010-0623			DoS	2010-02-15	2020-08-14	4.9	None	Local	Low	Not required	None	None	Complete
The futex_lock_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly manage a certain reference count, which allows local users to cause a denial of service (OOPS) via vectors involving an unmount of an ext3 filesystem.
42	CVE-2010-0395			Exec Code Bypass	2010-06-10	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.
43	CVE-2010-0205	400		DoS	2010-03-03	2020-08-07	4.3	None	Remote	Medium	Not required	None	None	Partial
The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.
44	CVE-2010-0136	77			2010-02-16	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
45	CVE-2009-4895	362		DoS	2010-09-08	2020-08-27	4.7	None	Local	Medium	Not required	None	None	Complete
Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions. NOTE: the vulnerability was addressed in a different way in 2.6.32.9.
46	CVE-2009-4484	787	1	DoS Exec Code Overflow Mem. Corr.	2009-12-30	2020-11-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
47	CVE-2009-3612	200		+Info	2009-10-19	2020-08-14	2.1	None	Local	Low	Not required	Partial	None	None
The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5, and 2.4.37.6 and earlier, does not initialize a certain tcm__pad2 structure member, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2005-4881.
48	CVE-2009-3302	94		DoS Exec Code	2010-02-16	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTSetBrc table property modifier in a Word document, related to a "boundary error flaw."
49	CVE-2009-3301	191		DoS Exec Code	2010-02-16	2022-02-07	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted sprmTDefTable table property modifier in a Word document.
50	CVE-2009-3228	909		+Info	2009-10-19	2020-08-13	2.1	None	Local	Low	Not required	Partial	None	None
The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.6.x before 2.6.31-rc9 does not initialize certain (1) tcm__pad1 and (2) tcm__pad2 structure members, which might allow local users to obtain sensitive information from kernel memory via unspecified vectors.

Total number of vulnerabilities : 73 Page : 1 (This Page)2