Approved changes feed: RSS · Atom

cpe:2.3:o:canonical:ubuntu_linux:22.10:*:*:*:-:*:*:*

part: o version: 22.10 update: *

VendorCanonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88)
ProductUbuntu Linux (f82c71f7-7613-59c6-b78d-a15b5eb77bd3)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6387 vulnerable 2026-06-08 06:58:19.204600 Openssh: regresshion - race condition in ssh allows rce/dos
HIGH (8.1)
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Published: 2024-07-01T12:37:25.431Z
Updated: 2026-07-14T12:37:29.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3297 vulnerable 2026-06-08 06:09:39.095265 Details available
HIGH (8.1)
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
Published: 2023-09-01T20:49:43.576Z
Updated: 2024-09-30T20:19:08.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3297 not_vulnerable 2026-06-08 06:09:39.093201 Details available
HIGH (8.1)
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
Published: 2023-09-01T20:49:43.576Z
Updated: 2024-09-30T20:19:08.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2612 vulnerable 2026-06-08 06:02:42.632889 shiftfs lock unbalance in Ubuntu-specific kernels
MEDIUM (4.4)
Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).
Published: 2023-05-30T23:12:29.867Z
Updated: 2025-02-13T16:44:50.457Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1786 vulnerable 2026-06-08 05:52:37.035302 sensitive data exposure in cloud-init logs
MEDIUM (5.5)
Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
Published: 2023-04-26T22:23:47.305Z
Updated: 2025-02-13T16:39:30.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1523 vulnerable 2026-06-08 05:52:36.045598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1326 vulnerable 2026-06-08 05:52:34.407435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1032 vulnerable 2026-06-08 05:52:33.672847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3328 vulnerable 2026-06-08 05:48:20.552349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2602 vulnerable 2026-06-08 05:43:35.890886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.