12.04 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2020-16119	416		2021-01-14	2022-01-01	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196.
2	CVE-2019-17544	125		2019-10-14	2021-08-02	6.4	None	Remote	Low	Not required	Partial	None	Partial
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
3	CVE-2018-16276	20		2018-08-31	2019-03-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.
4	CVE-2018-12015	59	Dir. Trav. Bypass	2018-06-07	2020-08-24	6.4	None	Remote	Low	Not required	None	Partial	Partial
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
5	CVE-2018-9363	787	Overflow	2018-11-06	2020-08-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.
6	CVE-2017-14491	787	DoS Exec Code Overflow	2017-10-04	2022-04-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
7	CVE-2017-6964	252	Exec Code	2017-03-28	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through 2.1.5+deb1+cvs20081104-13.1 on Debian, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1 on Ubuntu 14.04 LTS, and eject before 2.1.5+deb1+cvs20081104-9ubuntu0.1 on Ubuntu 12.04 LTS.
8	CVE-2017-6590	863	Exec Code	2017-03-09	2019-10-03	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries.
9	CVE-2017-6056	835	DoS	2017-02-17	2019-10-03	5.0	None	Remote	Low	Not required	None	None	Partial
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.
10	CVE-2017-5333	190	DoS Exec Code Overflow	2019-11-04	2019-11-07	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitrary code via a crafted executable file.
11	CVE-2017-5332	119	DoS Exec Code Overflow	2019-11-04	2019-11-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.
12	CVE-2017-5331	190	DoS Exec Code Overflow	2019-11-04	2019-11-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a crafted executable.
13	CVE-2016-10109	416	DoS	2017-02-23	2021-06-29	5.0	None	Remote	Low	Not required	None	None	Partial
Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
14	CVE-2016-9963	320		2017-02-01	2017-02-15	2.6	None	Remote	High	Not required	Partial	None	None
Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
15	CVE-2016-9775	264	+Priv	2017-03-23	2021-06-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u7 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to gain root privileges via a setgid program in the Catalina directory, as demonstrated by /etc/tomcat8/Catalina/attack.
16	CVE-2016-9774	59	+Priv +Info	2017-03-23	2018-08-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u8 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to obtain sensitive information or gain root privileges via a symlink attack on the Catalina localhost directory.
17	CVE-2016-9597	119	DoS Overflow	2018-07-30	2019-10-09	5.0	None	Remote	Low	Not required	None	None	Partial
It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.
18	CVE-2016-9119	79	XSS	2017-01-30	2017-02-03	4.3	None	Remote	Medium	Not required	None	Partial	None
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
19	CVE-2016-9014	264		2016-12-09	2017-11-04	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.
20	CVE-2016-9013	798		2016-12-09	2017-11-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.
21	CVE-2016-7401	254	Bypass CSRF	2016-10-03	2018-01-05	5.0	None	Remote	Low	Not required	None	Partial	None
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
22	CVE-2016-6855	787	DoS	2016-09-07	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.
23	CVE-2016-6489	203		2017-04-14	2020-11-16	5.0	None	Remote	Low	Not required	Partial	None	None
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
24	CVE-2016-6352	787	DoS	2016-10-03	2019-12-19	5.0	None	Remote	Low	Not required	None	None	Partial
The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.
25	CVE-2016-6313	200	+Info	2016-12-13	2018-01-05	5.0	None	Remote	Low	Not required	Partial	None	None
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
26	CVE-2016-6262	125	+Info	2016-09-07	2021-06-29	5.0	None	Remote	Low	Not required	Partial	None	None
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
27	CVE-2016-6261	125	DoS	2016-09-07	2021-06-29	5.0	None	Remote	Low	Not required	None	None	Partial
The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
28	CVE-2016-6232	22	Dir. Trav.	2016-08-02	2016-11-28	5.0	None	Remote	Low	Not required	None	Partial	None
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.
29	CVE-2016-6128	20	DoS	2016-08-07	2020-11-16	5.0	None	Remote	Low	Not required	None	None	Partial
The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 7.0.9, allows remote attackers to cause a denial of service (application crash) via an invalid color index.
30	CVE-2016-5440			2016-07-21	2019-12-27	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
31	CVE-2016-5439			2016-07-21	2019-03-04	4.0	None	Remote	Low	???	None	None	Partial
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.
32	CVE-2016-5421	416		2016-08-10	2020-05-08	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.
33	CVE-2016-5403	400	DoS	2016-08-02	2021-08-04	4.9	None	Local	Low	Not required	None	None	Complete
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
34	CVE-2016-5300	399	DoS	2016-06-16	2021-07-31	7.8	None	Remote	Low	Not required	None	None	Complete
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876.
35	CVE-2016-5195	362	+Priv	2016-11-10	2022-03-10	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
36	CVE-2016-5118	284	Exec Code	2016-06-10	2019-12-27	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a \| (pipe) character at the start of a filename.
37	CVE-2016-4998	119	DoS Overflow +Info	2016-07-03	2019-12-27	5.6	None	Local	Low	Not required	Partial	None	Complete
The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.
38	CVE-2016-4997	264	DoS +Priv Mem. Corr.	2016-07-03	2019-12-27	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
39	CVE-2016-4971	254		2016-06-30	2021-04-30	4.3	None	Remote	Medium	Not required	None	Partial	None
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.
40	CVE-2016-4913	200	+Info	2016-05-23	2019-12-27	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.
41	CVE-2016-4804	119	DoS Overflow	2016-06-03	2020-05-30	2.1	None	Local	Low	Not required	None	None	Partial
The read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function.
42	CVE-2016-4581		DoS	2016-05-23	2019-12-27	4.9	None	Local	Low	Not required	None	None	Complete
fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.
43	CVE-2016-4580	200	+Info	2016-05-23	2016-11-28	5.0	None	Remote	Low	Not required	Partial	None	None
The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.
44	CVE-2016-4579	20	DoS	2016-06-13	2019-11-29	5.0	None	Remote	Low	Not required	None	None	Partial
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
45	CVE-2016-4578	200	+Info	2016-05-23	2019-03-25	2.1	None	Local	Low	Not required	Partial	None	None
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
46	CVE-2016-4574	189	DoS	2016-06-13	2019-11-29	5.0	None	Remote	Low	Not required	None	None	Partial
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
47	CVE-2016-4569	200	+Info	2016-05-23	2018-01-05	2.1	None	Local	Low	Not required	Partial	None	None
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
48	CVE-2016-4556		DoS	2016-05-10	2019-12-27	5.0	None	Remote	Low	Not required	None	None	Partial
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response.
49	CVE-2016-4555	20	DoS	2016-05-10	2019-12-27	5.0	None	Remote	Low	Not required	None	None	Partial
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses.
50	CVE-2016-4554	345	Bypass	2016-05-10	2019-12-27	5.0	None	Remote	Low	Not required	None	Partial	None
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue.

Total number of vulnerabilities : 589 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12