Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Ubuntu Number Of NVD 4093 CRITICAL 341 HIGH 1595 MEDIUM 1941 LOW 216
URL https://ubuntu.com/
Explanation A release without LTS is a normal release and provides support for 9 months after it is released.
LTS (Long Term Support) provides support for five years.
After the end of LTS, we also offer a service that provides extended support (about 5 years) for a fee.
Tag
  • Linux

Add Information URL
No Type Name URL
1 https://ubuntu.com/about/release-cycle
2 https://wiki.ubuntu.com/
3 https://wiki.ubuntu.com/Releases
4 https://ubuntu.com/licensing
5 https://ubuntu.com/security/notices

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
3911 Ubuntu 24 24.04.3 Aug. 7, 2025 April 25, 2024 0 0 1 0
3912 Ubuntu 23.04 23.04 April 24, 2023 April 24, 2023 April 30, 2024 1 5 2 0
3913 Ubuntu 22.04 LTS 22.04.5 Sept. 12, 2024 April 21, 2022 April 30, 2027 April 30, 2032 1 25 11 0
3914 Ubuntu 21.10 21.10 Oct. 14, 2021 Oct. 14, 2021 June 14, 2022 June 14, 2022 1 18 19 0
3915 Ubuntu 21.04 21.04 April 22, 2021 April 22, 2021 Jan. 30, 2022 0 12 11 0
3916 Ubuntu 20.10 20.10 Oct. 22, 2020 Oct. 22, 2020 July 30, 2021 0 5 13 1
3917 Ubuntu 20.04 LTS 20.04.6 March 23, 2023 April 23, 2020 April 30, 2025 April 30, 2030 21 144 239 32
3918 Ubuntu 19.10 Oct. 17, 2019 July 30, 2020 32 133 227 44
3919 Ubuntu 19.04 April 18, 2019 Jan. 30, 2020 45 126 184 23
3920 Ubuntu 18.10 Oct. 18, 2018 July 31, 2019 66 174 182 5
3921 Ubuntu 18.04 LTS 18.04.6 Sept. 17, 2021 April 26, 2018 April 30, 2023 April 30, 2028 202 645 891 80
3922 Ubuntu 17.10 Oct. 18, 2017 July 19, 2018 4 18 14 0
3923 Ubuntu 17.04 April 13, 2017 July 20, 2017 4 18 14 0
3924 Ubuntu 16.10 Oct. 13, 2016 July 28, 2016 6 24 8 0
3925 Ubuntu 16.04 LTS 16.04.7 Aug. 13, 2020 April 21, 2016 April 30, 2021 April 30, 2024 239 852 1060 83
3926 Ubuntu 15.10 Oct. 22, 2015 Feb. 4, 2016 20 148 162 24
3927 Ubuntu 15.04 April 23, 2015 July 23, 2015 5 100 130 29
3928 Ubuntu 14.10 Oct. 23, 2014 July 14, 2014 0 3 1 0
3929 Ubuntu 14.04 LTS 14.04.6 March 7, 2019 April 17, 2014 April 30, 2019 April 30, 2022 216 844 1015 82
3930 Ubuntu 13.10 Oct. 17, 2013 July 14, 2014 15 56 68 15
3931 Ubuntu 13.04 April 25, 2013 Jan. 27, 2014 6 16 60 9
3932 Ubuntu 12.04 LTS April 26, 2012 April 28, 2017 April 30, 2019 90 577 669 83
3933 Ubuntu 11.10 Oct. 13, 2011 May 9, 2013 1 111 108 13
3934 Ubuntu 11.04 April 28, 2011 Oct. 28, 2012 1 56 56 8
3935 Ubuntu 10.10 Oct. 10, 2010 April 10, 2012 2 47 52 17
3936 Ubuntu 9.10 Oct. 29, 2009 April 30, 2011 5 56 56 16
3937 Ubuntu 9.04 April 23, 2009 Oct. 23, 2010 3 46 57 8
3938 Ubuntu 8.10 Oct. 30, 2008 April 30, 2010 2 49 47 6
3939 Ubuntu 8.04 LTS 8.04.4 Jan. 28, 2010 April 24, 2008 May 9, 2013 7 99 119 18
3940 Ubuntu 7.10 Oct. 18, 2007 April 18, 2009 3 48 37 5
3941 Ubuntu 7.04 April 19, 2007 Oct. 19, 2008 4 46 28 4
3942 Ubuntu 6.10 Oct. 26, 2006 April 26, 2008 2 33 32 4
3943 Ubuntu 5.10 Oct. 13, 2005 April 13, 2007 0 22 19 1
3944 Ubuntu 5.04 April 8, 2005 Oct. 31, 2006 0 14 13 2
3945 Ubuntu 4.10 Oct. 20, 2004 April 30, 2006 1 13 8 2
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
3911 -
4.4
MEDIUM The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) per… CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-1630 cpe:2.3:o:canonical:ubuntu_linux:9.04:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-05-15
Show GitHub Exploit DB Packet Storm
3912 -
5.0
MEDIUM mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no… NVD-CWE-noinfo
CVE-2009-1191 cpe:2.3:o:canonical:ubuntu_linux:9.04:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-04-24
Show GitHub Exploit DB Packet Storm
3913 -
2.1
LOW Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with … CWE-120
Classic Buffer Overflow
CVE-2009-1186 cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-04-17
Show GitHub Exploit DB Packet Storm
3914 -
7.2
HIGH udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. CWE-346
 Origin Validation Error
CVE-2009-1185 cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-04-17
Show GitHub Exploit DB Packet Storm
3915 -
7.5
HIGH Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcm… CWE-190
 Integer Overflow or Wraparound
CVE-2009-0946 cpe:2.3:o:canonical:ubuntu_linux:9.04:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-04-17
Show GitHub Exploit DB Packet Storm
3916 -
10.0
HIGH The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of servic… CWE-824
 Access of Uninitialized Pointer
CVE-2009-0846 cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:8.04:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-04-9
Show GitHub Exploit DB Packet Storm
3917 -
7.8
HIGH libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2009-1270 cpe:2.3:o:canonical:ubuntu_linux:8.10:* 2026-04-23 09:35
2009-04-9
Show GitHub Exploit DB Packet Storm
3918 -
4.9
MEDIUM The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of servi… CWE-20
 Improper Input Validation 
CVE-2009-1242 cpe:2.3:o:canonical:ubuntu_linux:9.04:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-04-6
Show GitHub Exploit DB Packet Storm
3919 -
4.9
MEDIUM nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a files… CWE-16
Configuration
CVE-2009-1072 cpe:2.3:o:canonical:ubuntu_linux:9.04:*
cpe:2.3:o:canonical:ubuntu_linux:8.10:*
cpe:2.3:o:canonical:ubuntu_linux:…
2026-04-23 09:35
2009-03-25
Show GitHub Exploit DB Packet Storm
3920 -
7.5
HIGH Integer overflow in the gst_vorbis_tag_add_coverart function (gst-libs/gst/tag/gstvorbistag.c) in vorbistag in gst-plugins-base (aka gstreamer-plugins-base) before 0.10.23 in GStreamer allows context… CWE-190
 Integer Overflow or Wraparound
CVE-2009-0586 cpe:2.3:o:canonical:ubuntu_linux:8.10:* 2026-04-23 09:35
2009-03-15
Show GitHub Exploit DB Packet Storm