12.04 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2020-15862	269		2020-08-20	2020-09-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.
2	CVE-2020-14392	119	Overflow Mem. Corr.	2020-09-16	2021-10-19	2.1	None	Local	Low	Not required	None	None	Partial
An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability.
3	CVE-2020-7065	787	Exec Code Mem. Corr.	2020-04-01	2021-12-02	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
4	CVE-2020-7064	125		2020-04-01	2022-05-09	5.8	None	Remote	Medium	Not required	Partial	None	Partial
In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.
5	CVE-2020-0543	459		2020-06-15	2022-04-28	2.1	None	Local	Low	Not required	Partial	None	None
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
6	CVE-2019-1010305	119	Overflow	2019-07-15	2021-11-30	4.3	None	Remote	Medium	Not required	Partial	None	None
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.
7	CVE-2019-20907	835		2020-07-13	2022-04-28	5.0	None	Remote	Low	Not required	None	None	Partial
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
8	CVE-2019-20079	416		2019-12-30	2020-10-20	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
9	CVE-2019-19242	476		2019-11-27	2022-04-19	4.3	None	Remote	Medium	Not required	None	None	Partial
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
10	CVE-2019-18197	416		2019-10-18	2020-08-24	5.1	None	Remote	High	Not required	Partial	Partial	Partial
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.
11	CVE-2019-16275	346	DoS	2019-09-12	2020-08-24	3.3	None	Local Network	Low	Not required	None	None	Partial
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.
12	CVE-2019-15031	200	+Info	2019-09-13	2021-07-21	3.6	None	Local	Low	Not required	Partial	None	Partial
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
13	CVE-2019-14287	755	Bypass	2019-10-17	2022-04-18	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
14	CVE-2019-13627	362		2019-09-25	2021-07-21	2.6	None	Local	High	Not required	Partial	Partial	None
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
15	CVE-2019-13565			2019-07-26	2022-04-20	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.
16	CVE-2019-11478	400	DoS	2019-06-19	2020-10-20	5.0	None	Remote	Low	Not required	None	None	Partial
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
17	CVE-2019-11477	190	DoS Overflow	2019-06-19	2020-10-20	7.8	None	Remote	Low	Not required	None	None	Complete
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
18	CVE-2019-11068		Bypass	2019-04-10	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
19	CVE-2019-11050	125		2019-12-23	2021-07-22	6.4	None	Remote	Low	Not required	Partial	None	Partial
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
20	CVE-2019-11045	74		2019-12-23	2021-07-22	4.3	None	Remote	Medium	Not required	Partial	None	None
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
21	CVE-2019-11043	787	Exec Code	2019-10-28	2021-07-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.
22	CVE-2019-11042	125		2019-08-09	2021-07-22	5.8	None	Remote	Medium	Not required	Partial	None	Partial
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
23	CVE-2019-11041	125		2019-08-09	2021-07-22	5.8	None	Remote	Medium	Not required	Partial	None	Partial
When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure or crash.
24	CVE-2019-11036	125		2019-05-03	2020-10-02	6.4	None	Remote	Low	Not required	Partial	None	Partial
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
25	CVE-2019-11035	125		2019-04-18	2020-10-02	6.4	None	Remote	Low	Not required	Partial	None	Partial
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_iif_add_value function. This may lead to information disclosure or crash.
26	CVE-2019-11034	125		2019-04-18	2020-10-02	6.4	None	Remote	Low	Not required	Partial	None	Partial
When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exif_process_IFD_TAG function. This may lead to information disclosure or crash.
27	CVE-2019-9675	119	Overflow	2019-03-11	2019-06-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
DISPUTED An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible."
28	CVE-2019-9641	908		2019-03-09	2022-04-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
29	CVE-2019-9640	125		2019-03-09	2022-04-05	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
30	CVE-2019-9639	908		2019-03-09	2022-04-05	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
31	CVE-2019-9638	125		2019-03-09	2022-04-05	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
32	CVE-2019-9637	264		2019-03-09	2019-06-03	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
33	CVE-2019-9213	476		2019-03-05	2019-06-17	4.9	None	Local	Low	Not required	None	None	Complete
In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.
34	CVE-2019-9024	125		2019-02-22	2019-06-18	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.
35	CVE-2019-9023	125		2019-02-22	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
36	CVE-2019-9022	125		2019-02-22	2019-06-18	5.0	None	Remote	Low	Not required	Partial	None	None
An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.
37	CVE-2019-9021	125		2019-02-22	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.
38	CVE-2019-9020	125		2019-02-22	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
39	CVE-2019-7663			2019-02-09	2020-08-24	4.3	None	Remote	Medium	Not required	None	None	Partial
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
40	CVE-2019-7306	200	+Info	2020-04-17	2021-07-21	5.0	None	Remote	Low	Not required	Partial	None	None
Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu
41	CVE-2019-7222		+Info	2019-03-21	2020-08-24	2.1	None	Local	Low	Not required	Partial	None	None
The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
42	CVE-2019-6974	362		2019-02-15	2022-04-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
43	CVE-2019-6133	362	Bypass	2019-01-11	2020-08-24	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
44	CVE-2019-6128	401		2019-01-11	2020-08-24	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
45	CVE-2019-5188	787	Exec Code	2020-01-08	2022-05-12	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
46	CVE-2019-5094	787	Exec Code	2019-09-24	2022-04-29	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
47	CVE-2019-3814	295		2019-03-27	2019-06-14	4.9	None	Remote	Medium	???	Partial	Partial	None
It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could possibly use this issue to impersonate other users.
48	CVE-2019-3462		Exec Code	2019-01-28	2020-08-24	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.
49	CVE-2019-0217	362	Bypass	2019-04-08	2021-06-06	6.0	None	Remote	Medium	???	Partial	Partial	Partial
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.
50	CVE-2018-1000805	863		2018-10-08	2022-04-06	6.5	None	Remote	Low	???	Partial	Partial	Partial
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

Total number of vulnerabilities : 445 Page : 1 (This Page)2 3 4 5 6 7 8 9