Canonical vulnerabilities
224 CVEs and advisories name Canonical as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-2640On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unp
- CVE-2023-32551Landscape Open Redirect
- CVE-2023-32550Landscape's Apache server-status is accessible by default
- CVE-2023-32549Landscape insecure token generation
- CVE-2023-2612shiftfs lock unbalance in Ubuntu-specific kernels
- CVE-2023-1786sensitive data exposure in cloud-init logs
- CVE-2022-2084sensitive data exposure in cloud-init logs
- CVE-2021-3429sensitive data exposure in cloud-init logs
- CVE-2023-1326local privilege escalation in apport-cli
- CVE-2021-4120snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
- CVE-2021-44730snapd could be made to escalate privileges and run programs as administrator
- CVE-2021-3155snapd created ~/snap with too-wide permissions
- CVE-2021-44731snapd could be made to escalate privileges and run programs as administrator
- CVE-2021-3747MacOS version of Multipass incorrect owner for application directory
- CVE-2021-3710Apport info disclosure via path traversal bug in read_file
- CVE-2021-3709Apport file permission bypass through emacs byte compilation errors
- CVE-2021-3626Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts
- CVE-2021-32557apport process_report() arbitrary file write
- CVE-2021-32556apport get_modified_conffiles() function command injection
- CVE-2021-32555apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32554apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32553apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32552apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32551apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32550apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32549apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32548apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-32547apport read_file() function could follow maliciously constructed symbolic links
- CVE-2021-25684apport can be stalled by reading a FIFO
- CVE-2021-25683apport improperly parses /proc/pid/stat