Known vulnerabilities in libmodule-scandeps-perl (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
libmodule-scandeps-perl (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:libmodule-scandeps-perl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
5
Public exploits:
3
Known exploited (KEV):
1
Breakdown by Severity Chart
1.20-1ubuntu0.1~esm1
1.27-1ubuntu0.1~esm1
1.24-1ubuntu0.1~esm1
1.35-2
1.35-1
1.34-1
1.31-2
1.31-1
1.28-1
1.29-1
1.30-1
1.37-1
1.35-1ubuntu0.24.10.1
1.35-1ubuntu0.24.04.1
1.31-1ubuntu0.1
1.27
1.24
1.13
1.07
1.20
1.24-1
1.25-1
1.26-1
1.27-1
1.23-1
1.22-1
1.21-1
1.20-1
0.51-1
0.54-1
0.57-1
0.60-1
0.62-1
0.75-1
0.76-1
0.77-1
0.78-1
0.81-1
0.82-1
0.82-2
0.82-3
0.83-1
0.83-2
0.84-1
0.86-1
0.87-1
0.89-1
0.90-1
0.91-1
0.93-1
0.94-1
0.95-1
0.97-1
0.98-1
1.00-1
1.02-1
1.04-1
1.05-1
1.07-1
1.08-1
1.10-1
1.11-1
1.13-1
1.14-1
1.15-1
1.16-1
1.19-1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-11003 |
CWE-78 | Low | 1.20-1ubuntu0.1~esm1, 1.24-1ubuntu0.1~esm1, 1.27-1ubuntu0.1~esm1, 1.31-1ubuntu0.1, 1.35-1ubuntu0.24.04.1, 1.35-1ubuntu0.24.10.1 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100984 - Improper Control of Generation of Code ('Code Injection') CVE-2024-48992 |
CWE-94 | Low | 1.20-1ubuntu0.1~esm1, 1.24-1ubuntu0.1~esm1, 1.27-1ubuntu0.1~esm1, 1.31-1ubuntu0.1, 1.35-1ubuntu0.24.04.1, 1.35-1ubuntu0.24.10.1 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100983 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-48991 |
CWE-362 | Low | 1.20-1ubuntu0.1~esm1, 1.24-1ubuntu0.1~esm1, 1.27-1ubuntu0.1~esm1, 1.31-1ubuntu0.1, 1.35-1ubuntu0.24.04.1, 1.35-1ubuntu0.24.10.1 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100982 - Improper Control of Generation of Code ('Code Injection') CVE-2024-48990 |
CWE-94 | Low | 1.20-1ubuntu0.1~esm1, 1.24-1ubuntu0.1~esm1, 1.27-1ubuntu0.1~esm1, 1.31-1ubuntu0.1, 1.35-1ubuntu0.24.04.1, 1.35-1ubuntu0.24.10.1 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100773 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-10224 |
CWE-78 | Low | 1.20-1ubuntu0.1~esm1, 1.24-1ubuntu0.1~esm1, 1.27-1ubuntu0.1~esm1, 1.31-1ubuntu0.1, 1.35-1ubuntu0.24.04.1, 1.35-1ubuntu0.24.10.1 | 21.11.2024 |
SB2024112115 SB2024112118 SB2024112139 and 7 more |