Known vulnerabilities in linux-azure-fips (Ubuntu package) - page 151
Vendor:
Canonical Ltd.
Software:
linux-azure-fips (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:linux-azure-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
3168
Public exploits:
20
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.15.0.1117.102
5.15.0-1117.126+fips1
5.15.0.1116.101
5.15.0-1116.125+fips1
6.8.0-1063.71+fips2
6.8.0-134.134+fips1
6.8.0-1062.69+fips1
6.8.0-1059.65+fips1
6.8.0-1054.60+fips1
5.15.0.1110.95
5.15.0-1110.119+fips1
5.15.0.1109.94
5.15.0-1109.118+fips1
6.8.0-1052.58+fips1
5.4.0.1160.97
5.4.0-1160.166+fips1
6.8.0-1047.53+fips1
4.15.0.2106.102
4.15.0-2106.112
6.8.0-1046.52+fips1
6.8.0-1044.50+fips1
5.4.0.1157.94
5.4.0-1157.164+fips1
4.15.0.2104.100
4.15.0-2104.110
5.15.0.1101.86
5.15.0-1101.110+fips1
5.4.0.1155.92
5.4.0-1155.162+fips1
5.15.0.1097.82
5.15.0-1097.106+fips1
4.15.0.2102.98
4.15.0-2102.108
5.15.0.1096.81
5.15.0-1096.105+fips1
4.15.0.2085.83
4.15.0.1139.136
4.15.0.2101.97
4.15.0-2101.107
4.15.0-2085.91
4.15.0-1139.150
5.15.0.1094.79
5.15.0-1094.103+fips1
5.4.0.1121.118
5.4.0.1153.90
5.4.0-1153.160+fips1
5.4.0-1121.131
5.15.0.1091.76
5.15.0-1091.100+fips1
4.15.0.2098.94
4.15.0-2098.104
5.15.0.1089.74
5.15.0-1089.98+fips1
5.4.0.1151.88
5.4.0-1151.158+fips1
Vulnerabilities (3168)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107678 - Use After Free CVE-2024-58093 |
CWE-416 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 22.04.2025 |
SB2025042256 SB2025050999 SB20250509100 and 43 more |
||
| #VU106963 - Use of Uninitialized Resource CVE-2025-21996 |
CWE-908 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 03.04.2025 |
SB2025040381 SB20250416110 SB20250422196 and 47 more |
||
| #VU106955 - Use After Free CVE-2025-21999 |
CWE-416 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 03.04.2025 |
SB2025040373 SB20250422196 SB2025042540 and 87 more |
||
| #VU106867 - Improper input validation CVE-2025-21992 |
CWE-20 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402132 SB20250422196 SB2025052639 and 46 more |
||
| #VU106864 - Memory corruption CVE-2025-21994 |
CWE-119 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402129 SB20250422196 SB2025042540 and 32 more |
||
| #VU106860 - Resource Management Errors CVE-2025-21956 |
CWE-399 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402125 SB20250422196 SB2025052056 and 47 more |
||
| #VU106843 - Integer overflow CVE-2025-21964 |
CWE-190 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402106 SB20250422196 SB2025042540 and 41 more |
||
| #VU106842 - Integer overflow CVE-2025-21963 |
CWE-190 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402105 SB20250422196 SB2025042540 and 40 more |
||
| #VU106841 - Integer overflow CVE-2025-21962 |
CWE-190 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402104 SB20250422196 SB2025052639 and 42 more |
||
| #VU106840 - Use of Uninitialized Resource CVE-2025-21959 |
CWE-908 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB20250402103 SB20250422196 SB2025062348 and 43 more |
||
| #VU106806 - Improper input validation CVE-2025-21970 |
CWE-20 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040291 SB20250422196 SB2025052639 and 37 more |
||
| #VU106704 - NULL Pointer Dereference CVE-2025-21941 |
CWE-476 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040268 SB20250422196 SB2025042540 and 38 more |
||
| #VU106695 - NULL Pointer Dereference CVE-2025-21957 |
CWE-476 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040265 SB20250422196 SB2025050999 and 46 more |
||
| #VU106686 - NULL Pointer Dereference CVE-2025-21975 |
CWE-476 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040263 SB20250422196 SB2025052639 and 38 more |
||
| #VU106647 - Out-of-bounds read CVE-2025-21991 |
CWE-125 | Low | 5.4.0.1121.118, 5.4.0-1121.131, 5.4.0.1153.90, 5.4.0-1153.160+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040248 SB20250422196 SB2025052639 and 65 more |
||
| #VU106629 - Use After Free CVE-2025-21968 |
CWE-416 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040243 SB20250422196 SB2025052639 and 38 more |
||
| #VU106578 - Missing release of memory after effective lifetime CVE-2025-21981 |
CWE-401 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 02.04.2025 |
SB2025040231 SB20250422196 SB2025052639 and 38 more |
||
| #VU102034 - Use After Free CVE-2024-56664 |
CWE-416 | Low | 5.4.0.1157.94, 5.4.0-1157.164+fips1, 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 30.12.2024 |
SB2024123058 SB2025020348 SB2025020351 and 75 more |
||
| #VU101815 - Improper input validation CVE-2024-53144 |
CWE-20 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 17.12.2024 |
SB2024121769 SB20250115100 SB2025011731 and 44 more |
||
| #VU97841 - Improper input validation CVE-2024-46821 |
CWE-20 | Low | 5.15.0.1091.76, 5.15.0-1091.100+fips1 | 30.09.2024 |
SB2024093092 SB2024100401 SB2024101232 and 30 more |
Showing elements 3001 - 3020 out of 3168