Skip to contentGnome vulnerabilities
Newest
- gnome geditlibgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service ...CVE-2017-141085.5 Medium
- gnome gdk-pixbuf, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk...CVE-2017-2870Fix available8.8 High
- gnome gdk-pixbuf, debian linux +1 moreAn exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment...CVE-2017-2862Fix available8.8 High
- gnome librestThe OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by...CVE-2015-2675Fix available7.5 High
- gnome libsoup, debian linux, redhat enterprise linux desktop +5 more +7 moreAn exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A...CVE-2017-2885Fix availableEPSS 23.1%9.8 Critical
- gnome libgxpsThere is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0...CVE-2017-11590Fix available7.5 High
- gnome librsvgA SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during...CVE-2017-11464Fix available7.8 High
- gnome gtk-vncgtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer...CVE-2017-1000044Fix available9.8 Critical
- gnome epiphanyGNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18...CVE-2017-1000025Fix available7.5 High
- gnome shotwellShotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information...CVE-2017-1000024Fix available7.5 High
- gnome evince, debian linux, redhat enterprise linux desktop +5 more +7 morebackend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1...CVE-2017-1000083Public exploitFix availableEPSS 51.1%7.8 High
- gnome gnome-sessionBad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old...CVE-2017-11171Fix available5.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote...CVE-2017-8871Public exploitFix availableEPSS 12.9%6.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to...CVE-2017-8834Fix available6.5 Medium
- gnome gnome-shellgnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to...CVE-2017-8288Fix available8.1 High
- gnome libcroco** DISPUTED ** The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an...CVE-2017-7961Fix availableDisputed7.8 High
- gnome libcrocoThe cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote...CVE-2017-7960Fix available5.5 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreThe make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent...CVE-2017-6314Fix available5.5 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreInteger underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context...CVE-2017-6313Fix available7.1 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreInteger overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial...CVE-2017-6312Fix available5.5 Medium
- gnome gdk-pixbuf, fedoraproject fedora +1 moregdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of...CVE-2017-6311Fix available7.5 High
- gnome gtk-vnc, fedoraproject fedora +1 moreMultiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set...CVE-2017-5885Fix available9.8 Critical
- gnome gtk-vnc, fedoraproject fedora +1 moregtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which...CVE-2017-5884Fix available7.8 High
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...CVE-2016-95977.5 High
- gnome librsvgThe rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote...CVE-2016-6163Fix available5.5 Medium
- gnome libgsfAn error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured...CVE-2016-9888Fix available5.5 Medium
- gnome shotwell, redhat enterprise linux +1 moreShotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification...CVE-2016-1000033Fix available3.7 Low
- gnome eye of gnome, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreEye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4,...CVE-2016-6855Public exploitFix availableEPSS 18.4%7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse leap +1 more +3 moreThe OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a...CVE-2016-6352Fix available7.5 High
- gnome librsvg, debian linux, opensuse leap +1 more +3 moreThe _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers...CVE-2016-4348Fix available7.5 High
- gnome gdk-pixbuf, debian linux +1 moreMultiple integer overflows in the (1) pixops_composite_nearest, (2)...CVE-2015-8875Fix available7.8 High
- gnome librsvg, debian linux +1 morelibrsvg DoS via Cyclic ReferencesCVE-2015-7558Fix available7.5 High
- gnome librsvgThe _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context...CVE-2015-7557Fix available7.5 High
- gnome orca, debian linux +1 moreOrca has arbitrary code execution due to insecure Python module loadCVE-2013-4245Fix available7.3 High
- gnome display manager, fedoraproject fedora +1 moreGNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the...CVE-2015-7496Fix available7.2 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse +2 moreInteger overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2...CVE-2015-7674Fix available6.8 Medium
- gnome gdk-pixbuf, opensuse +1 moreio-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows...CVE-2015-7673Fix available6.8 Medium
- gnome networkmanager, canonical ubuntu linux, oracle linux +6 more +8 moreGNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic...CVE-2015-0272Fix available5.0 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 Medium
- gnome byzanzThe GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds...CVE-2015-27857.5 High
- gnome vala, opensuse +1 moreThe Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration...CVE-2014-81547.5 High
- gnome gcab, opensuse +1 moreDirectory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in...CVE-2015-0552Fix available6.4 Medium
- gnome gnome-shell, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreGNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...CVE-2014-7300Fix available7.2 High
- gnome gtk, canonical ubuntu, linuxmint linux mint +2 moreGTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other...CVE-2014-1949Fix available7.2 High
- gnome gnome-terminal, opensuse, oracle solaris +2 moreThe "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows...CVE-2011-2198Fix available3.5 Low
- gnome display managerGNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows...CVE-2013-7273Fix available2.1 Low
- gnome gnome-shellThe automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not...CVE-2013-7221Fix available4.6 Medium
- gnome gnome-shelljs/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate...CVE-2013-7220Fix available4.6 Medium
- gnome gnumericHeap-based buffer overflow in the ms_escher_get_data function in plugins/excel/ms-escher.c in...CVE-2013-6836Fix available4.3 Medium
- gnome librsvgGNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document...CVE-2013-1881Fix available4.3 Medium
- Show moreLoading…