Known vulnerabilities in Ubuntu - page 647

Vendor: Canonical Ltd.
Software: Ubuntu
Software CPE: cpe:2.3:o:canonical:ubuntu:*:*:*:*:*:*:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 16913
Public exploits: 540
Known exploited (KEV): 132
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ubuntu Ubuntu is affected by 16913 known vulnerabilities: 74 critical, 1864 high, 3894 medium, 11078 low Critical High Medium Low

Vulnerabilities (16913)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 - 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71377 - Improper input validation
CVE-2022-40898		 CWE-20 Medium
No
No
 - 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 - 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 - 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU69391 - Deserialization of Untrusted Data
CVE-2022-42919		 CWE-502 Low
No
No
 - 16.11.2022 SB2022111649
SB2022111655
SB2022111656
and 35 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 - 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU67733 - Missing release of memory after effective lifetime
CVE-2022-41556		 CWE-401 Medium
No
No
 - 29.09.2022 SB2022092907
SB2022092908
SB2022103103
and 5 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 - 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 - 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU64863 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-30123		 CWE-78 High
No
No
 - 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 14 more
#VU64862 - Improper input validation
CVE-2022-30122		 CWE-20 Medium
No
No
 - 02.07.2022 SB2022070222
SB2022070430
SB2022072530
and 8 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 - 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU59537 - Out-of-bounds read
CVE-2022-22707		 CWE-125 Medium
No
No
 - 12.01.2022 SB2022011210
SB2022011723
SB2023022865
and 1 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925		 CWE-457 Medium
No
No
 - 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898		 CWE-457 Medium
No
No
 - 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more


Showing elements 12921 - 12940 out of 16913