Known vulnerabilities in libc6 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libc6 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libc6_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
35
Public exploits:
4
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.39-0ubuntu8.8
2.35-0ubuntu3.14
2.39-0ubuntu8.7
2.35-0ubuntu3.13
2.35-0ubuntu3.12
2.42-0ubuntu3
2.41-6ubuntu1.2
2.39-0ubuntu8.6
2.35-0ubuntu3.11
2.31-0ubuntu9.18
2.41-9ubuntu1
2.41-6ubuntu2
2.41-6ubuntu1.1
2.39-0ubuntu8.5
2.35-0ubuntu3.10
2.31-0ubuntu9.17
2.35-0ubuntu3.9
2.39-0ubuntu8.4
2.40-1ubuntu3.1
2.39-0ubuntu8.1
2.31-0ubuntu9.15
2.35-0ubuntu3.7
2.38-1ubuntu6.2
2.38-1ubuntu6.1
2.35-0ubuntu3.6
2.31-0ubuntu9.14
2.35-0ubuntu3.5
2.37-0ubuntu2.2
2.35-0ubuntu3.4
2.37-0ubuntu2.1
Ubuntu Pro (Infra-only)
2.230ubuntu11.3+esm1
2.31-0ubuntu9.7
2.34-0ubuntu3.2
2.23-0ubuntu11.3
2.27-3ubuntu1.6
2.27-3ubuntu1.5
2.27-3ubuntu1.4
2.27-3ubuntu1.3
2.30-0ubuntu2.2
2.27-3ubuntu1.2
2.23-0ubuntu11.2
2.31-0ubuntu9
2.30-0ubuntu2.1
2.23-0ubuntu3
2.19-0ubuntu6
2.19-0ubuntu6.15
2.15-0ubuntu10
2.15-0ubuntu10.18
2.19-0ubuntu6.14
2.15-0ubuntu10.15
2.15-0ubuntu10.22
2.19-0ubuntu6.15+esm1
2.30-0ubuntu2
2.30-0ubuntu1
2.28-0ubuntu1
2.27-3ubuntu1
2.23-0ubuntu11
2.23-0ubuntu10
2.29-0ubuntu2
Vulnerabilities (35)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU103687 - Memory corruption CVE-2025-0395 |
CWE-119 | Medium | Ubuntu Pro (Infra-only), 2.31-0ubuntu9.17, 2.35-0ubuntu3.9, 2.39-0ubuntu8.4, 2.40-1ubuntu3.1 | 06.02.2025 |
SB2025020664 SB2025020667 SB2025020668 and 66 more |
||
| #VU88822 - Memory corruption CVE-2024-2961 |
CWE-119 | High | 2.31-0ubuntu9.15, 2.35-0ubuntu3.7, 2.38-1ubuntu6.2, 2.39-0ubuntu8.1 | 18.04.2024 |
SB2024041855 SB2024041856 SB2024041857 and 107 more |
||
| #VU85935 - Integer overflow CVE-2023-6780 |
CWE-190 | Low | 2.38-1ubuntu6.1 | 31.01.2024 |
SB2024013126 SB2024013135 SB2024013136 and 6 more |
||
| #VU85934 - Off-by-one Error CVE-2023-6779 |
CWE-193 | Low | 2.38-1ubuntu6.1 | 31.01.2024 |
SB2024013126 SB2024013135 SB2024013136 and 5 more |
||
| #VU85932 - Heap-based Buffer Overflow CVE-2023-6246 |
CWE-122 | Low | 2.38-1ubuntu6.1 | 31.01.2024 |
SB2024013126 SB2024013135 SB2024013136 and 5 more |
||
| #VU81453 - Use After Free CVE-2023-4813 |
CWE-416 | Medium | Ubuntu Pro (Infra-only), 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2 | 04.10.2023 |
SB2023100435 SB2023100579 SB2023100581 and 91 more |
||
| #VU81448 - Missing release of memory after effective lifetime CVE-2023-5156 |
CWE-401 | Medium | Ubuntu Pro (Infra-only), 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2 | 03.10.2023 |
SB2023100364 SB2023120723 SB2024011035 and 11 more |
||
| #VU81447 - Use After Free CVE-2023-4806 |
CWE-416 | Medium | Ubuntu Pro (Infra-only), 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2 | 03.10.2023 |
SB2023100363 SB2023100402 SB2023100418 and 97 more |
||
| #VU81437 - Memory corruption CVE-2023-4911 |
CWE-119 | Low | 2.35-0ubuntu3.4, 2.37-0ubuntu2.1 | 03.10.2023 |
SB2023100343 SB2023100345 SB2023100402 and 94 more |
||
| #VU81097 - Out-of-bounds read CVE-2023-4527 |
CWE-125 | Medium | 2.35-0ubuntu3.4, 2.37-0ubuntu2.1 | 25.09.2023 |
SB2023092525 SB2023100345 SB2023100402 and 79 more |
||
| #VU61295 - Memory corruption CVE-2022-23219 |
CWE-119 | High | 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2, 2.230ubuntu11.3+esm1 | 14.03.2022 |
SB2022031429 SB2022031430 SB2022031526 and 51 more |
||
| #VU61294 - Memory corruption CVE-2022-23218 |
CWE-119 | High | 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2, 2.230ubuntu11.3+esm1 | 14.03.2022 |
SB2022031429 SB2022031430 SB2022031526 and 38 more |
||
| #VU61293 - Off-by-one Error CVE-2021-3999 |
CWE-193 | High | 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2, 2.230ubuntu11.3+esm1 | 14.03.2022 |
SB2022031429 SB2022031430 SB2022031526 and 36 more |
||
| #VU61292 - Missing release of memory after effective lifetime CVE-2021-3998 |
CWE-401 | Medium | 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2 | 14.03.2022 |
SB2022031429 SB2022031430 SB2022030129 and 8 more |
||
| #VU55972 - Integer overflow CVE-2021-35942 |
CWE-190 | Medium | Ubuntu Pro (Infra-only), 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2 | 18.08.2021 |
SB2021081817 SB2021081818 SB2021100416 and 32 more |
||
| #VU54337 - Improper input validation CVE-2016-10228 |
CWE-20 | Low | Ubuntu Pro (Infra-only), 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2 | 23.06.2021 |
SB2017030207 SB2021062314 SB2021062315 and 21 more |
||
| #VU50075 - Reachable Assertion CVE-2021-3326 |
CWE-617 | Medium | Ubuntu Pro (Infra-only), 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2 | 27.01.2021 |
SB2021012804 SB2021020710 SB2021020711 and 34 more |
||
| #VU50329 - Out-of-bounds read CVE-2019-25013 |
CWE-125 | Low | Ubuntu Pro (Infra-only), 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2 | 04.01.2021 |
SB2021020413 SB2021020414 SB2021020710 and 36 more |
||
| #VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-27618 |
CWE-835 | Medium | Ubuntu Pro (Infra-only), 2.27-3ubuntu1.5, 2.31-0ubuntu9.7, 2.34-0ubuntu3.2 | 04.01.2021 |
SB2021020709 SB2021020710 SB2021020711 and 31 more |
||
| #VU12270 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2017-12132 |
CWE-451 | Low | Ubuntu Pro (Infra-only) | 27.04.2018 |
SB2018022812 SB2018022022 SB2018021521 and 8 more |
Showing elements 1 - 20 out of 35