Gentoo vulnerabilities

Products

• Linux 136
• Portage 7
• Logrotate 6
• Webmin 6
• Cman 2
• Fence 2
• Soko 2
• Xdg-utils 2
• Xnview 2

Newest

• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files CVE-2024-12086 Fix available 6.1 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +11 more +13 more Rsync: heap buffer overflow in rsync due to improper checksum length handling CVE-2024-12084 Public exploitFix available EPSS 72.5% 9.8 CriticalJanuary 9, 2025
• gentoo webmin Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm... CVE-2024-36451 8.8 HighJuly 10, 2024
• gentoo ebuild for slurm pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign... CVE-2020-36770 9.8 CriticalJanuary 15, 2024
• gentoo portage Gentoo Portage missing PGP validation of executed code CVE-2016-20021 Fix available 9.8 CriticalJanuary 12, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• gentoo soko Soko SQL Injection vulnerability CVE-2023-28424 9.1 CriticalMarch 20, 2023
• gentoo soko Gentoo soko contains DoS attack based on SQL Injection CVE-2023-26033 7.5 HighFebruary 24, 2023
• gentoo portage Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64... CVE-2019-20384 5.5 MediumJanuary 20, 2020
• gentoo sci-mathematics-gimps The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search... CVE-2017-14484 7.3 HighSeptember 15, 2017
• gentoo dev-python-flower flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID... CVE-2017-14483 5.5 MediumSeptember 15, 2017
• gentoo portage Ebuild in Gentoo may change directory and file permissions depending on the order of installed... CVE-2004-2778 7.1 HighJune 27, 2017
• gentoo xdg-utils Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is... CVE-2014-9622 Fix available 6.8 MediumJanuary 18, 2015
• gentoo portage Gentoo Portage does not verify X.509 certificates from SSL servers CVE-2013-2100 Fix available 9.3 HighSeptember 29, 2014
• transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +1 more +3 more Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission... CVE-2014-4909 Fix available 6.8 MediumJuly 11, 2014
• gentoo nullmailer The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer... CVE-2013-4223 Fix available 5.0 MediumMay 23, 2014
• acme thttpd, open source development team sthttpd, fedoraproject fedora +2 more +4 more thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log... CVE-2013-0348 2.1 LowDecember 13, 2013
• mediawiki, fedoraproject fedora, gentoo linux +2 more MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password... CVE-2013-2032 Fix available 5.0 MediumNovember 15, 2013
• mediawiki, gentoo linux +1 more MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site... CVE-2013-2031 Fix available 4.3 MediumNovember 15, 2013
• aircrack-ng, gentoo linux +1 more Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a... CVE-2010-1159 Public exploitFix available 6.8 MediumOctober 17, 2013
• gentoo webmin Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and... CVE-2012-4893 6.8 MediumSeptember 11, 2012
• gentoo webmin file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before... CVE-2012-2983 EPSS 20.5% 5.0 MediumSeptember 11, 2012
• gentoo webmin file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary... CVE-2012-2982 Public exploit EPSS 61.9% 6.5 MediumSeptember 11, 2012
• gentoo webmin Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a... CVE-2012-2981 6.0 MediumSeptember 11, 2012
• gentoo logrotate The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process... CVE-2011-1550 6.3 MediumMarch 30, 2011
• gentoo logrotate The default configuration of logrotate on Gentoo Linux uses root privileges to process files in... CVE-2011-1549 6.3 MediumMarch 30, 2011
• gentoo logrotate The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files... CVE-2011-1548 Fix available 6.3 MediumMarch 30, 2011
• gentoo logrotate The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context... CVE-2011-1155 Fix available 1.9 LowMarch 30, 2011
• gentoo logrotate The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context... CVE-2011-1154 Fix available 6.9 MediumMarch 30, 2011
• gentoo logrotate Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier... CVE-2011-1098 Fix available 1.9 LowMarch 30, 2011
• gentoo cman, fence +1 more fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify... CVE-2008-4580 7.2 HighOctober 15, 2008
• gentoo cman, fence +1 more The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly ... CVE-2008-4579 1.9 LowOctober 15, 2008
• gentoo portage Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current... CVE-2008-4394 6.9 MediumOctober 10, 2008
• gentoo php toolkit Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to... CVE-2008-1734 3.6 LowApril 18, 2008
• gentoo linux The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux,... CVE-2008-1383 1.9 LowMarch 18, 2008
• gentoo linux expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows... CVE-2008-1078 7.2 HighFebruary 29, 2008
• gentoo xdg-utils Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands... CVE-2008-0386 6.8 MediumFebruary 4, 2008
• gentoo portage etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for... CVE-2007-6249 2.1 LowDecember 15, 2007
• gentoo mldonkey ebuild The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default... CVE-2007-5714 6.8 MediumOctober 30, 2007
• gentoo nvclock The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local... CVE-2007-3531 6.6 MediumJuly 25, 2007
• gentoo glibc ** DISPUTED ** Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2... CVE-2007-3508 Fix availableDisputed 7.2 HighJuly 3, 2007
• gentoo xnview Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute... CVE-2007-2194 Public exploit EPSS 18.9% 10.0 HighApril 24, 2007
• gentoo file, amavis virus scanner +1 more The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial... CVE-2007-2026 Fix available 7.8 HighApril 13, 2007
• gentoo linux The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a... CVE-2007-1500 4.3 MediumMarch 19, 2007
• gentoo linux The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2... CVE-2007-0476 4.6 MediumJanuary 25, 2007
• gentoo linux, media-libs jpeg +1 more The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem... CVE-2006-3005 5.0 MediumJune 13, 2006
• gentoo linux The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM... CVE-2006-1390 4.6 MediumMarch 25, 2006
• Show olderLoading…