Canonical Ltd. vulnerabilities, page 3
49 vulnerabilities
Known vulnerabilities in Canonical Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 21 products.
CVE-2023-1326canonical ltd.apport+3
EPSS score0.87%
A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.CVE-2023-48733canonical ltd.ubuntu edk ii+6EPSS score0.26%
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.CVE-2023-0092canonical ltd.juju+2EPSS score0.63%
An authenticated user who has read access to the juju controller model, may construct a remote request to download an arbitrary file from the controller's filesystem.CVE-2023-5616canonical ltd.ubuntu's gnome-control-center+4EPSS score0.23%
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.CVE-2023-5182canonical ltd.subiquity+2EPSS score0.22%
Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege.CVE-2023-49721canonical ltd.lxd+2EPSS score0.24%
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.CVE-2023-32550canonical ltd.landscape+1EPSS score0.45%
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API.CVE-2023-32551canonical ltd.landscape+1EPSS score0.32%
Landscape allowed URLs which caused open redirection.CVE-2023-32549canonical ltd.landscape+1EPSS score0.55%
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.