Known vulnerabilities in xz-utils (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
xz-utils (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:xz-utils_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
5.8.1-1.1
5.8.1-2
5.8.2-1
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm2
5.2.2-1.3ubuntu0.1+esm1
5.2.4-1ubuntu1.1+esm1
5.2.5-2ubuntu1.1
5.6.1+really5.4.5-1ubuntu0.3
5.8.1-1ubuntu0.1
5.8.1-1build2
5.8.0-1
5.8.1-1
5.6.4-1
5.6.3-1
5.6.2-2
5.6.2-1
5.6.1+really5.4.5-1build1
5.6.1+really5.4.5-1build0.1
5.6.1-1
5.6.1+really5.4.5-1
5.6.0-0.2
5.5.1alpha-0.1
5.5.2beta-1
5.6.0-0.1
5.4.5-0.3
5.4.5-0.2
5.4.5-0.1
5.4.4-0.1
5.4.1-0.2
5.4.1-0.1
5.4.1-0.0
5.3.3alpha-0.0
5.3.4alpha-0.0
5.3.5beta-0.0
5.4.0-0.0
5.4.0-0.1
5.2.10-0.0
5.2.9-0.0
5.2.8-0.0
5.2.7-0.0
5.2.7-0.1
5.2.5-2build2
5.2.5-2build1
5.2.5-1.1
5.2.5-2
5.2.5-2.1
5.2.5-1.0build2
5.2.5-1.0build1
5.2.5-1.0
5.8.1-1build1
5.6.4-1ubuntu1
5.2.5-2ubuntu1
5.6.1+really5.4.5-1ubuntu0.2
5.6.2-2ubuntu0.2
5.1.1alpha+201206142ubuntu2.16.04.1+esm1
5.2.4-1ubuntu1.1
5.2.5-2ubuntu0.1
5.2.2-1.3ubuntu0.1
5.2.4
5.2.4-1ubuntu1
5.2.2
5.1.1alpha+20120614
5.1.1alpha+20110809
5.2.4-1
4.999.9beta+20091002-1
4.999.9beta+20091004-1
4.999.9beta+20091016-1
4.999.9beta+20091116-1
4.999.9beta+20100117-1
4.999.9beta+20100131-1
4.999.9beta+20100212-1
4.999.9beta+20100212-2
4.999.9beta+20100212-3
4.999.9beta+20100212-4
4.999.9beta+20100307-1
4.999.9beta+20100527-1
4.999.9beta+20100602-1
4.999.9beta+20100713-1
4.999.9beta+20100810-1
4.999.9beta+20100903-1
4.999.9beta+20100927-1
5.1.1alpha+20110809-1
5.1.1alpha+20110809-2
5.1.1alpha+20110809-3
5.1.1alpha+20120614-1
5.1.1alpha+20120614-2
5.1.1alpha+20120614-2ubuntu1
5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2.1
5.1.1alpha+20120614-2.1ubuntu1
5.2.2-1.3
5.2.2-1.1
5.2.2-1.2
4.999.8beta-1
4.999.9beta-1
5.0.0-1
5.0.0-2
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139114 - Heap-based Buffer Overflow CVE-2026-34743 |
CWE-122 | Medium | 5.1.1 alpha+20120614-2ubuntu2.14.04.1+esm2, 5.1.1 alpha+20120614-2ubuntu2.16.04.1+esm2, 5.2.2-1.3ubuntu0.1+esm1, 5.2.4-1ubuntu1.1+esm1, 5.2.5-2ubuntu1.1, 5.6.1+really5.4.5-1ubuntu0.3, 5.8.1-1ubuntu0.1 | 22.07.2026 |
SB2026072263 SB2026072264 SB2026072265 and 7 more |
||
| #VU106970 - Heap-based Buffer Overflow CVE-2025-31115 |
CWE-122 | High | 5.6.1+really5.4.5-1ubuntu0.2, 5.6.2-2ubuntu0.2 | 03.04.2025 |
SB20250403127 SB20250403129 SB20250403137 and 19 more |
||
| #VU62002 - Improper input validation CVE-2022-1271 |
CWE-20 | High | 5.1.1 alpha+201206142ubuntu2.16.04.1+esm1, 5.2.2-1.3ubuntu0.1, 5.2.4-1ubuntu1.1, 5.2.5-2ubuntu0.1 | 08.04.2022 |
SB2022040803 SB2022040804 SB2022040822 and 134 more |