目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Ubuntu 厂商漏洞列表 / CVE 中文分析 38

Ubuntu 厂商相关 38 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Ubuntu 是由 Canonical 维护的基于 Linux 的开源操作系统，广泛用于服务器、云计算及个人桌面环境。其历史漏洞多涉及内核提权、本地权限提升及网络服务配置缺陷，偶见远程代码执行风险。值得关注的是，Ubuntu 提供长期支持版本以保障安全更新，并集成 AppArmor 强制访问控制机制。截至最新统计，已收录 38 条 CVE，反映出其庞大生态下的持续安全维护需求。

上位製品 Ubuntu: maas grub2 in Ubuntu Linux kernel Shiftfs in the Linux kernel Apport Unity8 base-files openssh edk2 Ubuntu package linux-bluefield Linux accountsservice 18.04 LTS (bionic) Linux kernel libvirt Linux kernel (aufs filesystem module) Whoopsie Cobbler snapweb Oxide Ubuntu Download Manager unity-scope-gdrive LXD Content Hub python-dbusmock Juju signon
CVE IDタイトルCVSS深刻度公開日
CVE-2026-3497 OpenSSH 安全漏洞 — opensshCWE-908 9.1AICriticalAI2026-03-12
CVE-2025-7044 Privilege Escalation in MAAS via Websocket Request Manipulation — MAASCWE-269 7.7 High2025-12-03
CVE-2025-2486 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu — edk2CWE-489 6.0AIMediumAI2025-11-26
CVE-2023-0881 DDoS in Ubuntu package linux-bluefield — Ubuntu package linux-bluefieldCWE-20 7.5 High2025-03-31
CVE-2022-1804 Accountsservice incorrectly drops privileges — LinuxCWE-269 5.5 Medium2025-03-25
CVE-2020-11935 aufs: improperly managed inode reference counts in the vfsub_dentry_open() method — Linux kernel (aufs filesystem module)CWE-911 4.4 Medium2023-04-07
CVE-2021-3939 Free of static data in accountsservice — accountsserviceCWE-590 7.8 High2021-11-17
CVE-2021-3493 Linux kernel 安全漏洞 — linux kernelCWE-270 8.8 High2021-04-17
CVE-2021-3492 Ubuntu linux kernel shiftfs file system double free vulnerability — Linux kernelCWE-415 8.8 High2021-04-17
CVE-2020-15708 Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability — libvirtCWE-732 9.3 Critical2020-11-06
CVE-2020-15707 GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. — grub2 in UbuntuCWE-362 5.7 Medium2020-07-29
CVE-2020-15706 GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. — grub2 in UbuntuCWE-362 6.4 Medium2020-07-29
CVE-2020-15705 GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim — grub2 in UbuntuCWE-347 6.4 Medium2020-07-29
CVE-2014-1423 Online Accounts Signon daemon gives out all oauth tokens to any app — signonCWE-522 5.9 Medium2020-05-07
CVE-2019-15793 Mishandling of file-system uid/gid with namespaces in shiftfs — Shiftfs in the Linux kernelCWE-538 6.5 Medium2020-04-23
CVE-2019-15794 Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs — Linux kernelCWE-672 7.1 High2020-04-23
CVE-2019-15791 Reference count underflow in shiftfs — Shiftfs in the Linux kernelCWE-672 7.1 High2020-04-23
CVE-2019-15792 Type confusion in shiftfs — Shiftfs in the Linux kernelCWE-843 7.1 High2020-04-23
CVE-2020-8832 Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 — 18.04 LTS (bionic) Linux kernelCWE-200 5.5 Medium2020-04-09
CVE-2012-2092 Ubuntu Cobbler 数据伪造问题漏洞 — Cobbler 7.4 -2019-12-06
CVE-2019-7307 Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml — apportCWE-367 7.0 -2019-08-29
CVE-2019-11476 Integer overflow in whoopsie results in out-of-bounds heap write — WhoopsieCWE-190 8.4 -2019-08-29
CVE-2016-1586 Oxide 输入验证错误漏洞 — Oxide 7.5 -2019-04-22
CVE-2016-1587 Snapweb interface 访问控制错误漏洞 — snapweb 7.5 -2019-04-22
CVE-2016-1584 Unity8 converged application lifecycle allows background applications to use on-screen keyboard when not top-most — Unity8 5.3 -2019-04-22
CVE-2016-1579 UDM doesn't check for confinement before running post-processing commands — Ubuntu Download Manager 9.8 -2019-04-22
CVE-2016-1573 Using a specially crafted fallback art property, scopes can execute arbitrary QML code in context of unity8-dash — Unity8 8.4 -2019-04-22
CVE-2015-1343 unity-scope-gdrive search feature logs search terms to syslog — unity-scope-gdrive 5.3 -2019-04-22
CVE-2015-1341 Apport privilege escalation through Python module imports — Apport 8.4 -2019-04-22
CVE-2015-1340 chmod race in doUidshiftIntoContainer — LXD 8.1 -2019-04-22

本页汇总了 Ubuntu 厂商截至目前公开的全部 38 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。