Known vulnerabilities in Ubuntu 21.10 - page 18

Vendor: Canonical Ltd.
Software: Ubuntu
Version: 21.10
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 716
Public exploits: 46
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ubuntu version 21.10 Ubuntu 21.10 is affected by 716 vulnerabilities: 5 critical, 153 high, 289 medium, 269 low Critical High Medium Low

Vulnerabilities (716)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63571 - Missing initialization of resource
CVE-2022-0382		 CWE-909 Low
No
No
 - 24.05.2022 SB2022032233
SB2022040721
SB2022020942
#VU63570 - Improper Handling of Exceptional Conditions
CVE-2022-0264		 CWE-755 Low
No
No
 - 24.05.2022 SB2022032233
SB2022040721
SB2022072146
and 2 more
#VU63568 - Missing release of memory after effective lifetime
CVE-2021-45480		 CWE-401 Low
No
No
 - 24.05.2022 SB2022032232
SB2022032233
SB2022040721
and 4 more
#VU61542 - Stack-based buffer overflow
CVE-2022-26496		 CWE-121 High
No
No
 - 22.03.2022 SB2022032231
SB2022032301
SB2022031631
and 6 more
#VU61541 - Integer overflow
CVE-2022-26495		 CWE-190 High
No
No
 - 22.03.2022 SB2022032231
SB2022032301
SB2022031631
and 6 more
#VU61423 - Resource Management Errors
CVE-2022-0396		 CWE-399 Medium
No
No
 - 17.03.2022 SB2022031701
SB2022031719
SB2022031728
and 17 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 - 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU61392 - Missing release of memory after effective lifetime
CVE-2022-0742		 CWE-401 High
No
No
 - 15.03.2022 SB2022031523
SB2022032422
SB2022032233
and 4 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Public exploit available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61287 - Improper input validation
CVE-2022-22719		 CWE-20 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU61247 - Out-of-bounds write
CVE-2022-0516		 CWE-787 Low
No
No
 - 10.03.2022 SB2022031030
SB2022031031
SB2022031036
and 17 more
#VU61245 - Permissions, Privileges, and Access Controls
CVE-2022-0492		 CWE-264 Low
Public exploit available
Exploited
 - 10.03.2022 SB2022031028
SB2022031032
SB2022031033
and 63 more
#VU61216 - Stack-based buffer overflow
CVE-2022-0435		 CWE-121 High
No
No
 - 09.03.2022 SB2022030915
SB2022030925
SB2022030926
and 41 more
#VU60762 - Improper Certificate Validation
CVE-2021-25636		 CWE-295 Low
No
No
 - 22.02.2022 SB2022022217
SB2022031624
SB2022110838
and 4 more
#VU60674 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-45444		 CWE-78 High
No
No
 - 17.02.2022 SB2022021701
SB2022021702
SB2022031621
and 15 more
#VU59896 - Permissions, Privileges, and Access Controls
CVE-2022-23222		 CWE-264 Low
Public exploit available
No
 - 20.01.2022 SB2022012050
SB2022061414
SB2022032233
and 22 more
#VU26210 - Improper Check for Dropped Privileges
CVE-2019-20044		 CWE-273 Low
Public exploit available
No
 - 19.03.2020 SB2020022427
SB2020031902
SB2020032519
and 13 more


Showing elements 341 - 360 out of 716