Approved changes feed: RSS · Atom

cpe:2.3:o:canonical:ubuntu_linux:23.04:*:*:*:*:*:*:*

part: o version: 23.04 update: *

VendorCanonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88)
ProductUbuntu Linux (f82c71f7-7613-59c6-b78d-a15b5eb77bd3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5616 vulnerable 2026-06-08 06:19:44.169541 Details available
In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.
Published: 2025-04-15T18:29:54.565Z
Updated: 2025-04-15T20:51:31.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4911 vulnerable 2026-06-08 06:16:14.856498 Glibc: buffer overflow in ld.so leading to privilege escalation
HIGH (7.8)
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
Published: 2023-10-03T17:25:08.434Z
Updated: 2026-07-14T11:59:00.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3297 vulnerable 2026-06-08 06:09:39.095291 Details available
HIGH (8.1)
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
Published: 2023-09-01T20:49:43.576Z
Updated: 2024-09-30T20:19:08.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3297 not_vulnerable 2026-06-08 06:09:39.092093 Details available
HIGH (8.1)
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus message to the accounts-daemon process.
Published: 2023-09-01T20:49:43.576Z
Updated: 2024-09-30T20:19:08.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32629 vulnerable 2026-06-08 06:04:46.663758 Details available
HIGH (7.8)
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
Published: 2023-07-26T01:59:47.061Z
Updated: 2025-02-13T16:54:52.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2640 vulnerable 2026-06-08 06:02:42.688674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1786 vulnerable 2026-06-08 05:52:37.035322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1523 vulnerable 2026-06-08 05:52:36.046883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.