12.04 LTS : Security Vulnerabilities

Cpe Name:cpe:/o:canonical:ubuntu_linux:12.04:-:lts

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2016-4805	416	DoS Mem. Corr.	2016-05-23	2019-04-22	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.
2	CVE-2016-0794	119	DoS Overflow Mem. Corr.	2016-02-18	2018-01-04	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LotusWordPro (lwp) document.
3	CVE-2015-2661			2015-07-16	2018-01-04	2.1	None	Local	Low	Not required	None	None	Partial
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows local users to affect availability via unknown vectors related to Client.
4	CVE-2014-9402	399	DoS	2015-02-24	2019-06-13	7.8	None	Remote	Low	Not required	None	None	Complete
The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.
5	CVE-2014-8080		DoS	2014-11-03	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
The REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document, aka an XML Entity Expansion (XEE) attack.
6	CVE-2014-7815	264	DoS	2014-11-14	2017-12-27	5.0	None	Remote	Low	Not required	None	None	Partial
The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.
7	CVE-2014-5033	362	Bypass	2014-08-19	2014-10-16	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
8	CVE-2014-4909	189	DoS Exec Code Overflow	2014-07-29	2014-11-13	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
9	CVE-2014-3730	20		2014-05-16	2018-10-30	4.3	None	Remote	Medium	Not required	None	Partial	None
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by "http:\\\djangoproject.com."
10	CVE-2014-3686	20	Exec Code	2014-10-15	2016-07-26	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.
11	CVE-2014-3618	119	DoS Exec Code Overflow	2014-09-08	2017-08-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted email header, related to "unbalanced quotes."
12	CVE-2014-3564	119	DoS Exec Code Overflow	2014-10-20	2016-10-17	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."
13	CVE-2014-3537	59		2014-07-23	2017-01-06	1.2	None	Local	High	Not required	Partial	None	None
The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files via a symlink attack on a file in /var/cache/cups/rss/.
14	CVE-2014-3528	255		2014-08-19	2018-10-30	4.0	None	Remote	High	Not required	Partial	Partial	None
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
15	CVE-2014-3522	297		2014-08-19	2018-10-30	4.0	None	Remote	High	Not required	Partial	Partial	None
The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
16	CVE-2014-3504			2014-08-19	2018-08-13	4.0	None	Remote	High	Not required	Partial	Partial	None
The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
17	CVE-2014-1419	362	+Priv	2014-07-24	2017-01-06	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vectors.
18	CVE-2014-1418		+Info	2014-05-16	2017-01-06	6.4	None	Remote	Low	Not required	Partial	Partial	None
Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers.
19	CVE-2014-0474	399		2014-04-23	2017-01-06	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to "MySQL typecasting."
20	CVE-2014-0473	264	Bypass CSRF	2014-04-23	2017-01-06	5.0	None	Remote	Low	Not required	Partial	None	None
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users.
21	CVE-2014-0472	94		2014-04-23	2017-01-06	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a "dotted Python path."
22	CVE-2014-0471	22	Dir. Trav.	2014-04-30	2015-06-03	5.0	None	Remote	Low	Not required	None	Partial	None
Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."
23	CVE-2014-0211	189	Exec Code Overflow	2014-05-15	2018-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
24	CVE-2014-0210	119	Exec Code Overflow	2014-05-15	2018-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.
25	CVE-2014-0209	189	Overflow +Priv	2014-05-15	2018-10-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
26	CVE-2014-0004	119	DoS Exec Code Overflow	2014-03-11	2016-12-30	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.
27	CVE-2013-6476	264	+Priv	2014-03-14	2014-03-17	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.
28	CVE-2013-6475	189	Exec Code Overflow	2014-03-14	2016-12-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.
29	CVE-2013-6474	119	Exec Code Overflow	2014-03-14	2016-12-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.
30	CVE-2013-6425	189	DoS	2014-01-18	2014-03-05	5.0	None	Remote	Low	Not required	None	None	Partial
Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
31	CVE-2013-6422	20		2013-12-23	2016-04-07	4.0	None	Remote	High	Not required	Partial	Partial	None
The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
32	CVE-2013-5745	20	DoS	2013-10-01	2013-11-30	7.1	None	Remote	Medium	Not required	None	None	Complete
The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial of service (infinite loop, CPU and disk consumption) via multiple crafted requests during authentication.
33	CVE-2013-4544	20	DoS Exec Code	2014-05-08	2014-05-09	4.9	None	Local Network	Medium	Single system	Partial	Partial	Partial
hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from third party information.
34	CVE-2013-4402	20	DoS	2013-10-28	2014-01-03	5.0	None	Remote	Low	Not required	None	None	Partial
The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.
35	CVE-2013-4314	20		2013-09-30	2013-12-08	4.3	None	Remote	Medium	Not required	None	Partial	None
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
36	CVE-2013-4311	264	Bypass	2013-10-03	2019-04-22	4.6	None	Local	Low	Not required	Partial	Partial	Partial
libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
37	CVE-2013-4296	119	DoS Overflow	2013-09-30	2019-04-22	4.0	None	Remote	Low	Single system	None	None	Partial
The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call.
38	CVE-2013-4288	362	+Priv Bypass	2013-10-03	2019-04-22	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
39	CVE-2013-4256	119	DoS Exec Code Overflow	2013-10-09	2016-12-30	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a denial of service (crash) or possibly execute arbitrary code via the (1) display command argument to the ProcessCommandLine function in server/os/utils.c; (2) ResetHosts function in server/os/access.c; (3) open_unix_socket, (4) open_isc_local, (5) open_xsight_local, (6) open_att_local, or (7) open_att_svr4_local function in server/os/connection.c; the (8) AUDIOHOST environment variable to the CreateWellKnownSockets or (9) AmoebaTCPConnectorThread function in server/os/connection.c; or (10) unspecified vectors related to logging in the osLogMsg function in server/os/aulog.c.
40	CVE-2013-4248	20		2013-08-17	2016-11-28	4.3	None	Remote	Medium	Not required	None	Partial	None
The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
41	CVE-2013-4242	200	+Info	2013-08-19	2018-10-30	1.9	None	Local	Medium	Not required	Partial	None	None
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
42	CVE-2013-3567	20	Exec Code	2013-08-19	2019-07-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet Enterprise before 2.8.2, deserializes untrusted YAML, which allows remote attackers to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.
43	CVE-2013-2175	20	DoS	2013-08-19	2016-12-07	5.0	None	Remote	Low	Not required	None	None	Partial
HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (negative array index usage and crash) via an HTTP header with a certain number of values, related to the MAX_HDR_HISTORY variable.
44	CVE-2013-2174	119	DoS Exec Code Overflow	2013-07-31	2019-04-22	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.
45	CVE-2013-2162	362	+Info	2013-08-19	2014-01-13	1.9	None	Local	Medium	Not required	Partial	None	None
Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as credentials.
46	CVE-2013-2145	20	Exec Code Bypass	2013-08-19	2018-10-30	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.
47	CVE-2013-2132		DoS	2013-08-15	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."
48	CVE-2013-2126	399	DoS Exec Code	2013-08-14	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
49	CVE-2013-2112		DoS	2013-07-31	2018-10-30	7.8	None	Remote	Low	Not required	None	None	Complete
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection.
50	CVE-2013-2099	399	DoS	2013-10-09	2016-06-08	4.3	None	Remote	Medium	Not required	None	None	Partial
Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python versions, allows remote attackers to cause a denial of service (CPU consumption) via multiple wildcard characters in the common name in a certificate.

Total number of vulnerabilities : 101 Page : 1 (This Page)2 3