Search CVE reports


Toggle filters

571 – 580 of 1765 results


CVE-2017-8061

Medium priority
Ignored

drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory...

27 affected packages

linux, linux-armadaxp, linux-aws, linux-flo, linux-gke...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — —
linux-armadaxp — — — — —
linux-aws — — — — —
linux-flo — — — — —
linux-gke — — — — —
linux-goldfish — — — — —
linux-grouper — — — — —
linux-hwe — — — — —
linux-hwe-edge — — — — —
linux-linaro-omap — — — — —
linux-linaro-shared — — — — —
linux-linaro-vexpress — — — — —
linux-lts-quantal — — — — —
linux-lts-raring — — — — —
linux-lts-saucy — — — — —
linux-lts-trusty — — — — —
linux-lts-utopic — — — — —
linux-lts-vivid — — — — —
linux-lts-wily — — — — —
linux-lts-xenial — — — — —
linux-maguro — — — — —
linux-mako — — — — —
linux-manta — — — — —
linux-qcm-msm — — — — —
linux-raspi2 — — — — —
linux-snapdragon — — — — —
linux-ti-omap4 — — — — —
Show all 27 packages Show less packages

CVE-2017-8067

Medium priority

Some fixes available 2 of 17

drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption)...

31 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — —
linux-armadaxp — — — — —
linux-aws — — — — —
linux-azure — — — — —
linux-euclid — — — — —
linux-flo — — — — —
linux-gcp — — — — —
linux-gke — — — — —
linux-goldfish — — — — —
linux-grouper — — — — —
linux-hwe — — — — —
linux-hwe-edge — — — — —
linux-kvm — — — — —
linux-linaro-omap — — — — —
linux-linaro-shared — — — — —
linux-linaro-vexpress — — — — —
linux-lts-quantal — — — — —
linux-lts-raring — — — — —
linux-lts-saucy — — — — —
linux-lts-trusty — — — — —
linux-lts-utopic — — — — —
linux-lts-vivid — — — — —
linux-lts-wily — — — — —
linux-lts-xenial — — — — —
linux-maguro — — — — —
linux-mako — — — — —
linux-manta — — — — —
linux-qcm-msm — — — — —
linux-raspi2 — — — — —
linux-snapdragon — — — — —
linux-ti-omap4 — — — — —
Show all 31 packages Show less packages

CVE-2017-8064

Medium priority

Some fixes available 2 of 17

drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory...

31 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — —
linux-armadaxp — — — — —
linux-aws — — — — —
linux-azure — — — — —
linux-euclid — — — — —
linux-flo — — — — —
linux-gcp — — — — —
linux-gke — — — — —
linux-goldfish — — — — —
linux-grouper — — — — —
linux-hwe — — — — —
linux-hwe-edge — — — — —
linux-kvm — — — — —
linux-linaro-omap — — — — —
linux-linaro-shared — — — — —
linux-linaro-vexpress — — — — —
linux-lts-quantal — — — — —
linux-lts-raring — — — — —
linux-lts-saucy — — — — —
linux-lts-trusty — — — — —
linux-lts-utopic — — — — —
linux-lts-vivid — — — — —
linux-lts-wily — — — — —
linux-lts-xenial — — — — —
linux-maguro — — — — —
linux-mako — — — — —
linux-manta — — — — —
linux-qcm-msm — — — — —
linux-raspi2 — — — — —
linux-snapdragon — — — — —
linux-ti-omap4 — — — — —
Show all 31 packages Show less packages

CVE-2017-8063

Medium priority

Some fixes available 2 of 17

drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash) or possibly have...

31 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — —
linux-armadaxp — — — — —
linux-aws — — — — —
linux-azure — — — — —
linux-euclid — — — — —
linux-flo — — — — —
linux-gcp — — — — —
linux-gke — — — — —
linux-goldfish — — — — —
linux-grouper — — — — —
linux-hwe — — — — —
linux-hwe-edge — — — — —
linux-kvm — — — — —
linux-linaro-omap — — — — —
linux-linaro-shared — — — — —
linux-linaro-vexpress — — — — —
linux-lts-quantal — — — — —
linux-lts-raring — — — — —
linux-lts-saucy — — — — —
linux-lts-trusty — — — — —
linux-lts-utopic — — — — —
linux-lts-vivid — — — — —
linux-lts-wily — — — — —
linux-lts-xenial — — — — —
linux-maguro — — — — —
linux-mako — — — — —
linux-manta — — — — —
linux-qcm-msm — — — — —
linux-raspi2 — — — — —
linux-snapdragon — — — — —
linux-ti-omap4 — — — — —
Show all 31 packages Show less packages

CVE-2017-7979

Medium priority

Some fixes available 2 of 13

The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized...

31 affected packages

linux, linux-armadaxp, linux-aws, linux-azure, linux-euclid...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — —
linux-armadaxp — — — — —
linux-aws — — — — —
linux-azure — — — — —
linux-euclid — — — — —
linux-flo — — — — —
linux-gcp — — — — —
linux-gke — — — — —
linux-goldfish — — — — —
linux-grouper — — — — —
linux-hwe — — — — —
linux-hwe-edge — — — — —
linux-kvm — — — — —
linux-linaro-omap — — — — —
linux-linaro-shared — — — — —
linux-linaro-vexpress — — — — —
linux-lts-quantal — — — — —
linux-lts-raring — — — — —
linux-lts-saucy — — — — —
linux-lts-trusty — — — — —
linux-lts-utopic — — — — —
linux-lts-vivid — — — — —
linux-lts-wily — — — — —
linux-lts-xenial — — — — —
linux-maguro — — — — —
linux-mako — — — — —
linux-manta — — — — —
linux-qcm-msm — — — — —
linux-raspi2 — — — — —
linux-snapdragon — — — — —
linux-ti-omap4 — — — — —
Show all 31 packages Show less packages

CVE-2017-7897

Medium priority
Ignored

A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary...

1 affected package

mantis

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mantis — — — — —
Show less packages

CVE-2017-7645

Medium priority

Some fixes available 14 of 33

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c,...

104 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-armadaxp...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-armadaxp — — — — Not in release
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Not affected
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Ignored Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-edge — Not in release Not in release Not in release Not affected
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Not affected
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Ignored Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Not affected
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Not affected
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Not affected
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-qcm-msm — — — — Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Not affected
linux-ti-omap4 — — — — Not in release
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 104 packages Show less packages

CVE-2017-7615

High priority
Ignored

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

1 affected package

mantis

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mantis — — — — —
Show less packages

CVE-2017-7889

Medium priority

Some fixes available 14 of 33

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and...

103 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux, linux-armadaxp...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips — Not in release Not affected Not affected Not affected
linux-azure-fips — Not in release Not affected Not affected Not affected
linux-gcp-fips — Not in release Not affected Not affected Not affected
linux — Not affected Not affected Not affected Not affected
linux-armadaxp — — — — Not in release
linux-aws — Not affected Not affected Not affected Not affected
linux-aws-5.15 — Not in release Not in release Not affected Not in release
linux-aws-5.4 — Not in release Not in release Not in release Not affected
linux-aws-6.14 — Not affected Not in release Not in release Not in release
linux-aws-6.8 — Not in release Not affected Not in release Not in release
linux-aws-hwe — Not in release Not in release Not in release Not in release
linux-azure — Not affected Not affected Not affected Ignored
linux-azure-4.15 — Not in release Not in release Not in release Not affected
linux-azure-5.15 — Not in release Not in release Not affected Not in release
linux-azure-5.4 — Not in release Not in release Not in release Not affected
linux-azure-6.11 — Ignored Not in release Not in release Not in release
linux-azure-6.8 — Not in release Not affected Not in release Not in release
linux-azure-fde — Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 — Not in release Not in release Ignored Not in release
linux-azure-nvidia — Not affected Not in release Not in release Not in release
linux-bluefield — Not in release Not in release Not affected Not in release
linux-euclid — — — — Not in release
linux-fips — Not in release Not affected Not affected Not affected
linux-flo — — — — Not in release
linux-gcp — Not affected Not affected Not affected Ignored
linux-gcp-4.15 — Not in release Not in release Not in release Not affected
linux-gcp-5.15 — Not in release Not in release Not affected Not in release
linux-gcp-5.4 — Not in release Not in release Not in release Not affected
linux-gcp-6.11 — Ignored Not in release Not in release Not in release
linux-gcp-6.14 — Not affected Not in release Not in release Not in release
linux-gcp-6.8 — Not in release Not affected Not in release Not in release
linux-gke — Not affected Not affected Ignored Not in release
linux-gkeop — Not affected Not affected Not affected Not in release
linux-gkeop-5.15 — Not in release Not in release Not affected Not in release
linux-goldfish — — — — Not in release
linux-grouper — — — — Not in release
linux-hwe — Not in release Not in release Not in release Ignored
linux-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-hwe-5.4 — Not in release Not in release Not in release Not affected
linux-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-hwe-6.14 — Not affected Not in release Not in release Not in release
linux-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-hwe-edge — Not in release Not in release Not in release Ignored
linux-ibm — Not affected Not affected Not affected Not in release
linux-ibm-5.15 — Not in release Not in release Not affected Not in release
linux-ibm-5.4 — Not in release Not in release Not in release Not affected
linux-ibm-6.8 — Not in release Not affected Not in release Not in release
linux-intel — Not affected Not in release Not in release Not in release
linux-intel-iot-realtime — Not in release Not affected Not in release Not in release
linux-intel-iotg — Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 — Not in release Not in release Not affected Not in release
linux-iot — Not in release Not in release Not affected Not in release
linux-kvm — Not in release Not affected Not affected Not affected
linux-linaro-omap — — — — Not in release
linux-linaro-shared — — — — Not in release
linux-linaro-vexpress — — — — Not in release
linux-lowlatency — Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 — Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.11 — Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.8 — Not in release Not affected Not in release Not in release
linux-lts-quantal — — — — Not in release
linux-lts-raring — — — — Not in release
linux-lts-saucy — — — — Not in release
linux-lts-trusty — — — — Not in release
linux-lts-utopic — — — — Not in release
linux-lts-vivid — — — — Not in release
linux-lts-wily — — — — Not in release
linux-lts-xenial — Not in release Not in release Not in release Not in release
linux-maguro — — — — Not in release
linux-mako — — — — Not in release
linux-manta — — — — Not in release
linux-nvidia — Not affected Not affected Not in release Not in release
linux-nvidia-6.11 — Not affected Not in release Not in release Not in release
linux-nvidia-6.5 — Not in release Not affected Not in release Not in release
linux-nvidia-6.8 — Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency — Not affected Not in release Not in release Not in release
linux-nvidia-tegra — Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 — Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx — Not in release Not affected Not in release Not in release
linux-oem — Not in release Not in release Not in release Ignored
linux-oem-6.11 — Not affected Not in release Not in release Not in release
linux-oem-6.14 — Not affected Not in release Not in release Not in release
linux-oem-6.8 — Not affected Not in release Not in release Not in release
linux-oracle — Not affected Not affected Not affected Not affected
linux-oracle-5.15 — Not in release Not in release Not affected Not in release
linux-oracle-5.4 — Not in release Not in release Not in release Not affected
linux-oracle-6.14 — Not affected Not in release Not in release Not in release
linux-oracle-6.8 — Not in release Not affected Not in release Not in release
linux-qcm-msm — — — — Not in release
linux-raspi — Not affected Not affected Not affected Not in release
linux-raspi-5.4 — Not in release Not in release Not in release Not affected
linux-raspi-realtime — Not affected Not in release Not in release Not in release
linux-raspi2 — Not in release Not in release Ignored Not affected
linux-realtime — Not affected Not affected Not in release Not in release
linux-realtime-6.14 — Not affected Not in release Not in release Not in release
linux-realtime-6.8 — Not in release Not affected Not in release Not in release
linux-riscv — Not affected Ignored Ignored Not in release
linux-riscv-5.15 — Not in release Not in release Not affected Not in release
linux-riscv-6.14 — Not affected Not in release Not in release Not in release
linux-riscv-6.8 — Not in release Not affected Not in release Not in release
linux-snapdragon — Not in release Not in release Not in release Not affected
linux-ti-omap4 — — — — Not in release
linux-xilinx-zynqmp — Not in release Not affected Not affected Not in release
Show all 103 packages Show less packages

CVE-2016-5856

High priority
Ignored

Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.

27 affected packages

linux, linux-armadaxp, linux-aws, linux-flo, linux-gke...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux — — — — —
linux-armadaxp — — — — —
linux-aws — — — — —
linux-flo — — — — —
linux-gke — — — — —
linux-goldfish — — — — —
linux-grouper — — — — —
linux-hwe — — — — —
linux-hwe-edge — — — — —
linux-linaro-omap — — — — —
linux-linaro-shared — — — — —
linux-linaro-vexpress — — — — —
linux-lts-quantal — — — — —
linux-lts-raring — — — — —
linux-lts-saucy — — — — —
linux-lts-trusty — — — — —
linux-lts-utopic — — — — —
linux-lts-vivid — — — — —
linux-lts-wily — — — — —
linux-lts-xenial — — — — —
linux-maguro — — — — —
linux-mako — — — — —
linux-manta — — — — —
linux-qcm-msm — — — — —
linux-raspi2 — — — — —
linux-snapdragon — — — — —
linux-ti-omap4 — — — — —
Show all 27 packages Show less packages