17.10 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-1000301	125	DoS	2018-05-24	2019-10-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.
2	CVE-2018-1000300	787	DoS Overflow	2018-05-24	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.
3	CVE-2018-1000199	119	Exec Code Overflow Mem. Corr.	2018-05-24	2020-08-24	4.9	None	Local	Low	Not required	None	None	Complete
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
4	CVE-2018-1000156	20	Exec Code	2018-04-06	2019-07-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
5	CVE-2018-1000127	190	Overflow	2018-03-13	2020-08-24	5.0	None	Remote	Low	Not required	None	None	Partial
memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service. This vulnerability appears to have been fixed in 1.4.37 and later.
6	CVE-2018-1000122	125	DoS +Info	2018-03-14	2019-10-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
7	CVE-2018-1000121	476	DoS	2018-03-14	2019-07-23	5.0	None	Remote	Low	Not required	None	None	Partial
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
8	CVE-2018-1000120	787	DoS Overflow	2018-03-14	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
9	CVE-2018-1000115	400	DoS	2018-03-05	2021-08-04	5.0	None	Remote	Low	Not required	None	None	Partial
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.
10	CVE-2018-1000097	119	Exec Code Overflow	2018-03-13	2018-04-13	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..
11	CVE-2018-1000085	125		2018-03-13	2019-03-20	4.3	None	Remote	Medium	Not required	None	None	Partial
ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This vulnerability appears to have been fixed in after commit d96a6b8bcc7439fa7e3876207aa0a8e79c8451b6.
12	CVE-2018-1000027	476	DoS	2018-02-09	2019-07-17	5.0	None	Remote	Low	Not required	None	None	Partial
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
13	CVE-2018-1000026	20		2018-02-09	2020-10-15	6.8	None	Remote	Low	???	None	None	Complete
Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..
14	CVE-2018-1000024		DoS	2018-02-09	2019-10-03	5.0	None	Remote	Low	Not required	None	None	Partial
The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax.. This vulnerability appears to have been fixed in 4.0.23 and later.
15	CVE-2018-1000007		+Info	2018-01-24	2022-04-27	5.0	None	Remote	Low	Not required	Partial	None	None
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
16	CVE-2018-1000005	125		2018-01-24	2019-06-18	6.4	None	Remote	Low	Not required	Partial	None	Partial
libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.
17	CVE-2018-1000001	787	Exec Code	2018-01-31	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
18	CVE-2018-13785	369	DoS Overflow	2018-07-09	2022-05-13	4.3	None	Remote	Medium	Not required	None	None	Partial
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
19	CVE-2018-13153	772		2018-07-05	2019-10-03	4.3	None	Remote	Medium	Not required	None	None	Partial
In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.
20	CVE-2018-13043	94	Exec Code	2018-07-01	2019-08-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.
21	CVE-2018-12910	125		2018-07-05	2019-05-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
22	CVE-2018-12600	787		2018-06-20	2018-08-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file.
23	CVE-2018-12599	787		2018-06-20	2018-08-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.
24	CVE-2018-12374	200	+Info	2018-10-18	2019-10-03	4.3	None	Remote	Medium	Not required	Partial	None	None
Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects Thunderbird < 52.9.
25	CVE-2018-12373	200	+Info	2018-10-18	2019-10-03	4.3	None	Remote	Medium	Not required	Partial	None	None
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.
26	CVE-2018-12372	200	+Info	2018-10-18	2019-10-03	4.3	None	Remote	Medium	Not required	Partial	None	None
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.
27	CVE-2018-12370	352	Bypass CSRF	2018-10-18	2018-12-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when Reader View is exited if loaded by a malicious site while Reader mode is active, bypassing CSRF protections. This vulnerability affects Firefox < 61.
28	CVE-2018-12369	863		2018-10-18	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization. This allowed a malicious WebExtension to gain full browser permissions. This vulnerability affects Firefox ESR < 60.1 and Firefox < 61.
29	CVE-2018-12367	20		2018-10-18	2018-12-06	4.3	None	Remote	Medium	Not required	Partial	None	None
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTiming was not adjusted but it was found that it could be used as a precision timer. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61.
30	CVE-2018-12366	125		2018-10-18	2018-12-03	4.3	None	Remote	Medium	Not required	Partial	None	None
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
31	CVE-2018-12365	200	+Info	2018-10-18	2018-12-03	4.3	None	Remote	Medium	Not required	Partial	None	None
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
32	CVE-2018-12364	352	Bypass CSRF	2018-10-18	2018-12-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
33	CVE-2018-12363	416		2018-10-18	2018-12-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
34	CVE-2018-12362	190	Overflow	2018-10-18	2018-12-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
35	CVE-2018-12361	190	Overflow	2018-10-18	2018-12-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61.
36	CVE-2018-12360	416		2018-10-18	2018-12-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
37	CVE-2018-12359	119	Overflow	2018-10-18	2018-12-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
38	CVE-2018-12358	200	+Info	2018-10-18	2018-12-06	4.3	None	Remote	Medium	Not required	Partial	None	None
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability affects Firefox < 61.
39	CVE-2018-12293	787	Overflow	2018-06-19	2020-08-24	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which could be abused by crafted HTML content.
40	CVE-2018-12265	125	Overflow	2018-06-13	2019-08-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.
41	CVE-2018-12264	125	Overflow	2018-06-13	2019-08-06	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp.
42	CVE-2018-12020	706		2018-06-08	2022-04-18	5.0	None	Remote	Low	Not required	None	Partial	None
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.
43	CVE-2018-12015	59	Dir. Trav. Bypass	2018-06-07	2020-08-24	6.4	None	Remote	Low	Not required	None	Partial	Partial
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
44	CVE-2018-11685	787	Overflow	2018-06-04	2020-08-24	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
45	CVE-2018-11684	787	Overflow	2018-06-04	2020-08-24	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
46	CVE-2018-11683	787	Overflow	2018-06-04	2020-08-24	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
47	CVE-2018-11656	772	DoS	2018-06-01	2019-10-03	4.3	None	Remote	Medium	Not required	None	None	Partial
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file.
48	CVE-2018-11655	772	DoS	2018-06-01	2019-10-03	4.3	None	Remote	Medium	Not required	None	None	Partial
In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file.
49	CVE-2018-11625	125		2018-05-31	2019-10-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.
50	CVE-2018-11577	120		2018-05-31	2019-10-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c.

Total number of vulnerabilities : 480 Page : 1 (This Page)2 3 4 5 6 7 8 9 10