CVE reports
The Common Vulnerabilities and Exposures (CVE) system is used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. Canonical keeps track of all CVEs affecting Ubuntu, and releases a security notice when an issue is fixed.
Canonical also produces Open Vulnerability and Assessment Language (OVAL) data, which is machine-readable, to enable auditing for CVEs and to determine whether a particular patch, via an Ubuntu Security Notice (USN), is appropriate for the local system.
Search
Recent CVEs affecting Ubuntu
| ID | Priority | Package |
14.04 ESM
|
16.04 ESM
|
18.04 ESM
|
20.04 LTS
|
22.04 LTS
|
23.04
|
23.10
|
|---|---|---|---|---|---|---|---|---|---|
| CVE-2023-39351 |
medium
|
freerdp2 |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-39350 |
low
|
freerdp2 |
Ignored
|
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-32360 |
medium
|
cups |
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-4567 |
medium
|
ansible |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| ansible-core |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4522 |
low
|
gitlab |
Ignored
|
Needs triage
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— |
| CVE-2023-41040 |
medium
|
python-git |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-41039 |
medium
|
restrictedpython |
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40481 |
medium
|
7zip |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-40184 |
medium
|
xrdp |
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-36811 |
medium
|
borgbackup |
Ignored
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-31102 |
medium
|
7zip |
Ignored
|
Ignored
|
Ignored
|
Does not exist
|
Needs triage
|
Needs triage
|
— |
| CVE-2023-20900 |
medium
|
open-vm-tools |
Not vulnerable
|
Needed
|
Needed
|
Needed
|
Needed
|
Needed
|
— |
| CVE-2023-4585 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4584 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4583 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4582 |
negligible
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
Ignored
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Ignored
|
Ignored
|
— | ||
| CVE-2023-4581 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4580 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4579 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| CVE-2023-4578 |
medium
|
firefox |
Ignored
|
Ignored
|
Ignored
|
Released
|
Needs triage
|
Needs triage
|
— |
| thunderbird |
Ignored
|
Ignored
|
Ignored
|
Needed
|
Needed
|
Needed
|
— | ||
| mozjs38 |
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
Does not exist
|
— | ||
| mozjs52 |
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs68 |
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
Does not exist
|
— | ||
| mozjs78 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— | ||
| mozjs91 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Does not exist
|
— | ||
| mozjs102 |
Does not exist
|
Does not exist
|
Does not exist
|
Does not exist
|
Needs triage
|
Needs triage
|
— |