Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Ubuntu Number Of NVD 4093 CRITICAL 341 HIGH 1595 MEDIUM 1941 LOW 216
URL https://ubuntu.com/
Explanation A release without LTS is a normal release and provides support for 9 months after it is released.
LTS (Long Term Support) provides support for five years.
After the end of LTS, we also offer a service that provides extended support (about 5 years) for a fee.
Tag
  • Linux

Add Information URL
No Type Name URL
1 https://ubuntu.com/about/release-cycle
2 https://wiki.ubuntu.com/
3 https://wiki.ubuntu.com/Releases
4 https://ubuntu.com/licensing
5 https://ubuntu.com/security/notices

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
881 Ubuntu 24 24.04.3 Aug. 7, 2025 April 25, 2024 0 0 1 0
882 Ubuntu 23.04 23.04 April 24, 2023 April 24, 2023 April 30, 2024 1 5 2 0
883 Ubuntu 22.04 LTS 22.04.5 Sept. 12, 2024 April 21, 2022 April 30, 2027 April 30, 2032 1 25 11 0
884 Ubuntu 21.10 21.10 Oct. 14, 2021 Oct. 14, 2021 June 14, 2022 June 14, 2022 1 18 19 0
885 Ubuntu 21.04 21.04 April 22, 2021 April 22, 2021 Jan. 30, 2022 0 12 11 0
886 Ubuntu 20.10 20.10 Oct. 22, 2020 Oct. 22, 2020 July 30, 2021 0 5 13 1
887 Ubuntu 20.04 LTS 20.04.6 March 23, 2023 April 23, 2020 April 30, 2025 April 30, 2030 21 144 239 32
888 Ubuntu 19.10 Oct. 17, 2019 July 30, 2020 32 133 227 44
889 Ubuntu 19.04 April 18, 2019 Jan. 30, 2020 45 126 184 23
890 Ubuntu 18.10 Oct. 18, 2018 July 31, 2019 66 174 182 5
891 Ubuntu 18.04 LTS 18.04.6 Sept. 17, 2021 April 26, 2018 April 30, 2023 April 30, 2028 202 645 891 80
892 Ubuntu 17.10 Oct. 18, 2017 July 19, 2018 4 18 14 0
893 Ubuntu 17.04 April 13, 2017 July 20, 2017 4 18 14 0
894 Ubuntu 16.10 Oct. 13, 2016 July 28, 2016 6 24 8 0
895 Ubuntu 16.04 LTS 16.04.7 Aug. 13, 2020 April 21, 2016 April 30, 2021 April 30, 2024 239 852 1060 83
896 Ubuntu 15.10 Oct. 22, 2015 Feb. 4, 2016 20 148 162 24
897 Ubuntu 15.04 April 23, 2015 July 23, 2015 5 100 130 29
898 Ubuntu 14.10 Oct. 23, 2014 July 14, 2014 0 3 1 0
899 Ubuntu 14.04 LTS 14.04.6 March 7, 2019 April 17, 2014 April 30, 2019 April 30, 2022 216 844 1015 82
900 Ubuntu 13.10 Oct. 17, 2013 July 14, 2014 15 56 68 15
901 Ubuntu 13.04 April 25, 2013 Jan. 27, 2014 6 16 60 9
902 Ubuntu 12.04 LTS April 26, 2012 April 28, 2017 April 30, 2019 90 577 669 83
903 Ubuntu 11.10 Oct. 13, 2011 May 9, 2013 1 111 108 13
904 Ubuntu 11.04 April 28, 2011 Oct. 28, 2012 1 56 56 8
905 Ubuntu 10.10 Oct. 10, 2010 April 10, 2012 2 47 52 17
906 Ubuntu 9.10 Oct. 29, 2009 April 30, 2011 5 56 56 16
907 Ubuntu 9.04 April 23, 2009 Oct. 23, 2010 3 46 57 8
908 Ubuntu 8.10 Oct. 30, 2008 April 30, 2010 2 49 47 6
909 Ubuntu 8.04 LTS 8.04.4 Jan. 28, 2010 April 24, 2008 May 9, 2013 7 99 119 18
910 Ubuntu 7.10 Oct. 18, 2007 April 18, 2009 3 48 37 5
911 Ubuntu 7.04 April 19, 2007 Oct. 19, 2008 4 46 28 4
912 Ubuntu 6.10 Oct. 26, 2006 April 26, 2008 2 33 32 4
913 Ubuntu 5.10 Oct. 13, 2005 April 13, 2007 0 22 19 1
914 Ubuntu 5.04 April 8, 2005 Oct. 31, 2006 0 14 13 2
915 Ubuntu 4.10 Oct. 20, 2004 April 30, 2006 1 13 8 2
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
881 7.8
7.2
HIGH
Local
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migra… - CVE-2019-14835 cpe:2.3:o:canonical:ubuntu_linux:19.04:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*
cpe:2.3:o:canonical:ubuntu_linu…
2024-11-21 13:27
2019-09-18
Show GitHub Exploit DB Packet Storm
882 9.8
7.5
CRITICAL
Network
OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be rel… CWE-290
 Authentication Bypass by Spoofing
CVE-2019-16378 cpe:2.3:o:canonical:ubuntu_linux:18.04:* 2024-11-21 13:30
2019-09-17
Show GitHub Exploit DB Packet Storm
883 9.8
7.5
CRITICAL
Network
process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. CWE-120
Classic Buffer Overflow
CVE-2019-16239 cpe:2.3:o:canonical:ubuntu_linux:18.04:* 2024-11-21 13:30
2019-09-17
Show GitHub Exploit DB Packet Storm
884 4.4
3.6
MEDIUM
Local
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a trans… CWE-662
 Improper Synchronization
CVE-2019-15031 cpe:2.3:o:canonical:ubuntu_linux:19.04:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*
cpe:2.3:o:canonical:ubuntu_linu…
2024-11-21 13:27
2019-09-13
Show GitHub Exploit DB Packet Storm
885 4.4
3.6
MEDIUM
Local
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local… CWE-862
 Missing Authorization
CVE-2019-15030 cpe:2.3:o:canonical:ubuntu_linux:19.04:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*
cpe:2.3:o:canonical:ubuntu_linu…
2024-11-21 13:27
2019-09-13
Show GitHub Exploit DB Packet Storm
886 6.5
3.3
MEDIUM
Adjacent
hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service th… CWE-346
 Origin Validation Error
CVE-2019-16275 cpe:2.3:o:canonical:ubuntu_linux:19.04:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*
cpe:2.3:o:canonical:ubuntu_linu…
2024-11-21 13:30
2019-09-13
Show GitHub Exploit DB Packet Storm
887 7.5
5.0
HIGH
Network
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala. CWE-346
 Origin Validation Error
CVE-2019-16237 cpe:2.3:o:canonical:ubuntu_linux:18.04:* 2024-11-21 13:30
2019-09-12
Show GitHub Exploit DB Packet Storm
888 7.5
5.0
HIGH
Network
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala. CWE-862
 Missing Authorization
CVE-2019-16236 cpe:2.3:o:canonical:ubuntu_linux:18.04:* 2024-11-21 13:30
2019-09-12
Show GitHub Exploit DB Packet Storm
889 7.5
5.0
HIGH
Network
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala. CWE-346
 Origin Validation Error
CVE-2019-16235 cpe:2.3:o:canonical:ubuntu_linux:18.04:* 2024-11-21 13:30
2019-09-12
Show GitHub Exploit DB Packet Storm
890 4.7
4.7
MEDIUM
Local
drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference
CVE-2019-16234 cpe:2.3:o:canonical:ubuntu_linux:18.04:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*
2024-11-21 13:30
2019-09-12
Show GitHub Exploit DB Packet Storm