Canonical vulnerabilities
224 CVEs and advisories name Canonical as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-25682apport improperly parses /proc/pid/status
- CVE-2013-1055Potential DoS through abuse of rate limit in libunity-webapps for Firefox
- CVE-2013-1054Possible remote DOS in WebApps
- CVE-2020-16119DCCP CCID structure use-after-free
- CVE-2013-1053Insecure crypto for storing passwords
- CVE-2020-27351Various memory and file descriptor leaks in apt-python
- CVE-2020-27350apt integer wraparound
- CVE-2020-27349aptdaemon performed policykit permissions checks too late
- CVE-2020-16128Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties
- CVE-2020-27348snapcraft may build snaps with incorrect LD_LIBRARY_PATH
- CVE-2020-16123Bypass of snapd pulseaudio restrictions
- CVE-2012-0955software-properties incorrectly validated TLS certificates
- CVE-2020-15710Potential double-free in pulseaudio
- CVE-2020-15703aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property
- CVE-2014-1420Insecure temp file usage in Ubuntu UI toolkit
- CVE-2020-15709add-apt-repository print ASNI terminal codes
- CVE-2020-15704pppd arbitrary file read information disclosure vulnerability
- CVE-2020-15702TOCTOU in apport
- CVE-2020-15701Unhandled exception in apport
- CVE-2020-11937Resource exhaustion vulnerability in whoopsie
- CVE-2020-11934Sandbox escape vulnerability via snapctl user-open (xdg-open)
- CVE-2020-11933local snapd exploit through cloud-init
- CVE-2014-1422Location service uses cached authorization even after revocation
- CVE-2020-11931Ubuntu modifications to pulseaudio to provide snap security enforcement could be unloaded
- CVE-2020-11932Subiquity server installer logged LUKS full disk encryption password
- CVE-2015-7946MTP service exposed during emergency dialer
- CVE-2019-15790Apport reads PID files with elevated privileges
- CVE-2020-8833Apport race condition in crash report permissions
- CVE-2020-8831World writable root owned lock file created in user controllable location
- CVE-2019-7306Byobu apport hook uploads user's ~/.screenrc