Gentoo Linux vulnerabilities

• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files CVE-2024-12086 Fix available 6.1 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +11 more +13 more Rsync: heap buffer overflow in rsync due to improper checksum length handling CVE-2024-12084 Public exploitFix available EPSS 72.5% 9.8 CriticalJanuary 9, 2025
• transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +1 more +3 more Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission... CVE-2014-4909 Fix available 6.8 MediumJuly 11, 2014
• acme thttpd, open source development team sthttpd, fedoraproject fedora +2 more +4 more thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log... CVE-2013-0348 2.1 LowDecember 13, 2013
• mediawiki, fedoraproject fedora, gentoo linux +2 more MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password... CVE-2013-2032 Fix available 5.0 MediumNovember 15, 2013
• mediawiki, gentoo linux +1 more MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site... CVE-2013-2031 Fix available 4.3 MediumNovember 15, 2013
• aircrack-ng, gentoo linux +1 more Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a... CVE-2010-1159 Public exploitFix available 6.8 MediumOctober 17, 2013
• gentoo linux The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux,... CVE-2008-1383 1.9 LowMarch 18, 2008
• gentoo linux expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows... CVE-2008-1078 7.2 HighFebruary 29, 2008
• gentoo linux The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a... CVE-2007-1500 4.3 MediumMarch 19, 2007
• gentoo linux The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2... CVE-2007-0476 4.6 MediumJanuary 25, 2007
• gentoo linux, media-libs jpeg +1 more The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem... CVE-2006-3005 5.0 MediumJune 13, 2006
• gentoo linux The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM... CVE-2006-1390 4.6 MediumMarch 25, 2006
• gentoo linux, app-crypt pinentry +1 more The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs,... CVE-2006-0071 6.6 MediumJanuary 4, 2006
• gentoo linux eix Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows... CVE-2005-3785 5.0 MediumNovember 23, 2005
• mantis, debian linux +1 more Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3... CVE-2005-2557 Public exploit 4.3 MediumAugust 19, 2005
• lbl tcpdump, gentoo linux, mandrakesoft mandrake linux +2 more +4 more The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the... CVE-2005-1267 Public exploitFix available EPSS 13.5% 5.0 MediumJune 10, 2005
• gentoo linux webapp-config The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to... CVE-2005-1707 Public exploit 4.6 MediumMay 24, 2005
• kde, conectiva linux, kde quanta +1 more +3 more Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user,... CVE-2005-0754 7.5 HighApril 22, 2005
• gentoo linux, igor khasilev oops proxy server +1 more Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and... CVE-2005-1121 Fix available 5.0 MediumApril 16, 2005
• gnu gzip, freebsd, gentoo linux +9 more +11 more Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local... CVE-2005-0988 Fix available 3.7 LowApril 6, 2005
• sylpheed, altlinux alt linux, gentoo linux +4 more +6 more Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers... CVE-2005-0667 Fix available 5.1 MediumMarch 7, 2005
• mediawiki, gentoo linux +1 more Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta... CVE-2005-0535 Fix available 7.5 HighFebruary 22, 2005
• wpa supplicant supplicant, gentoo linux +1 more Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of... CVE-2005-0470 5.0 MediumFebruary 19, 2005
• debian linux, xpdf, ascii ptex +15 more +17 more The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete... CVE-2005-0206 Fix available 7.5 HighFebruary 15, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3626 Fix available 5.0 MediumJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3625 Fix available 10.0 HighJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler... CVE-2005-3624 Fix available 5.0 MediumJanuary 25, 2005
• debian linux, redhat enterprise linux, enterprise linux desktop +2 more The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a... CVE-2005-0077 Fix available 2.1 LowJanuary 25, 2005
• imagemagick, debian linux, graphicsmagick +1 more +3 more Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions... CVE-2005-0005 Fix available 7.5 HighJanuary 19, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers... CVE-2004-1176 Fix available 7.5 HighJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure... CVE-2004-1175 Fix available 7.5 HighJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of... CVE-2004-1174 Fix available 5.0 MediumJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service... CVE-2004-1093 Fix available 5.0 MediumJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service... CVE-2004-1092 Fix available 5.0 MediumJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service... CVE-2004-1091 Fix available 5.0 MediumJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service... CVE-2004-1090 Fix available 5.0 MediumJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service ... CVE-2004-1009 Fix available 5.0 MediumJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to... CVE-2004-1005 Fix available 7.5 HighJanuary 14, 2005
• midnight commander commander, debian linux, redhat enterprise linux +3 more +5 more Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote... CVE-2004-1004 Fix available 7.5 HighJanuary 14, 2005
• gentoo portage, linux +1 more Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack... CVE-2004-1901 5.5 MediumDecember 31, 2004
• gentoo linux, kde, opera browser +2 more Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote... CVE-2004-1491 Public exploit EPSS 12.6% 5.0 MediumDecember 31, 2004
• cvs, freebsd, gentoo linux +3 more +5 more Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16... CVE-2004-1471 Public exploitFix available 7.1 HighDecember 31, 2004
• gentoo linux Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as... CVE-2004-1452 7.2 HighDecember 31, 2004
• debian tetex-bin, gentoo linux +1 more The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names,... CVE-2004-1336 2.1 LowDecember 23, 2004
• file, gentoo linux, trustix secure linux +2 more Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers... CVE-2004-1304 Public exploitFix available EPSS 11.4% 10.0 HighDecember 22, 2004
• libtiff, apple mac os x, mac os x server +15 more +17 more Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows... CVE-2004-1307 Fix available 7.5 HighDecember 21, 2004
• Show olderLoading…