Skip to contentGnome vulnerabilities
Newest
- gdk-pixbuf, debian linux, redhat enterprise linux +2 moregdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables...CVE-2011-28979.8 Critical
- debian linux, gnome display manager, opensuse leap +1 more +3 moregdm3 3.14.2 and possibly later has an information leak before screen lockCVE-2016-10000022.4 Low
- gnome evince, debian linux, opensuse +1 more +3 moreevince is missing a check on number of pages which can lead to a segmentation faultCVE-2013-3718Fix available5.5 Medium
- gnome libsoup, canonical ubuntu linux +1 morelibsoup through 2.68.1 has a heap-based buffer over-read because soup_ntlm_parse_challenge() in...CVE-2019-17266Fix available9.8 Critical
- gnome file-roller, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path...CVE-2019-16680Fix available4.3 Medium
- gnome evolution-ews, redhat enterprise linux +1 moreIt was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An...CVE-2019-3890Fix available8.1 High
- gnome pango, canonical ubuntu linux, debian linux +10 more +12 moreGnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...CVE-2019-1010238Fix available9.8 Critical
- evince team evince, canonical ubuntu linux, debian linux +1 more +3 moreEvince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The...CVE-2019-1010006Fix available7.8 High
- gnome glibThe keyfile settings backend in GNOME GLib (aka glib2.0) before 2.59.1 creates directories using...CVE-2019-13012Fix available7.5 High
- gnome gvfsdaemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x...CVE-2019-12795Fix available7.8 High
- gnome glib, canonical ubuntu linux, debian linux +6 more +8 morefile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...CVE-2019-12450Fix available9.8 Critical
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...CVE-2019-12449Fix available5.7 Medium
- gnome gvfsAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race...CVE-2019-12448Fix available8.1 High
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...CVE-2019-12447Fix available7.3 High
- gnome nautilusAn issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A...CVE-2019-11461Fix available7.8 High
- ekigaEkiga attempts to dlopen /tmp/ekiga_test.soCVE-2011-18305.7 Medium
- gnome gnome-desktopAn issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32...CVE-2019-11460Fix available9.0 Critical
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...CVE-2019-11459Fix available5.5 Medium
- gnome glibgio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during...CVE-2019-96336.5 Medium
- gnome gdk-pixbuf, nautilus +1 moreGdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04,...CVE-2017-12447Fix available7.8 High
- gnome keyring, canonical ubuntu linux, oracle zfs storage appliance kit +2 moreIn pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session...CVE-2018-20781Fix available7.8 High
- [unknown] gvfsAn incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that...CVE-2019-3827Fix available7.0 High
- gnome evolution, debian linux +1 moreGNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary...CVE-2018-15587Fix available6.5 Medium
- the gnome projectr gdm, canonical ubuntu linux, gnome display manager +1 more +3 moreA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...CVE-2019-3825Fix available6.3 Medium
- gnome gnome-shell, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that the gnome-shell lock screen since version 3.15.91 did not properly...CVE-2019-3820Fix available4.8 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreWebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon...CVE-2019-6251Fix available8.1 High
- gnome gnome-keyringGNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret...CVE-2018-19358Disputed7.8 High
- gnome seahorse** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate attackers to read...CVE-2008-7320Disputed6.8 Medium
- gnome gthumb, debian linux +1 moreAn issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the...CVE-2018-18718Fix available7.8 High
- gnome glib, canonical ubuntu linux +1 moreGNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in...CVE-2018-16429Fix available7.5 High
- gnome glib, canonical ubuntu linux +1 moreIn GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer...CVE-2018-16428Fix available9.8 Critical
- gnome pango, canonical ubuntu linux +1 morelibpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote...CVE-2018-15120Public exploitFix availableEPSS 11.4%6.5 Medium
- gnome display managerThe daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus...CVE-2018-14424Fix available7.8 High
- [unknown] networkmanager-vpnc, gnome network manager vpnc, debian linux +2 moreNetwork Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a...CVE-2018-10900Public exploitFix available8.8 High
- gnome evolution, canonical ubuntu linux +1 morecamel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server...CVE-2016-10727Fix available9.8 Critical
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- gnome evolution** DISPUTED ** addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME...CVE-2018-12422Fix availableDisputed9.8 Critical
- gnome epiphanylibephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a...CVE-2018-12016Fix available7.5 High
- gnome libsoup, webkitgtk webkitgtk\+ +1 moreWebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of...CVE-2018-11713Fix available6.5 Medium
- gnome epiphanyephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote...CVE-2018-11396Fix available7.5 High
- 9folders nine, apple mail, bloop airmail +14 more +16 moreThe S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can...CVE-2017-17689Fix available5.9 Medium
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...CVE-2018-10767Fix available6.5 Medium
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- gnome networkmanager, canonical ubuntu linux +1 moreGNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200)...CVE-2018-1000135Fix available7.5 High
- gnome librsvg, debian linux +1 moreGNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper...CVE-2018-1000041Fix available8.8 High
- gnome gcab, canonical ubuntu linux, debian linux +7 more +9 moreA stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious...CVE-2018-5345Fix available7.8 High
- gnome gdm, display manager +1 moreA flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean...CVE-2017-12164Fix available4.1 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, debian linux +2 moreGnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw...CVE-2017-1000422Fix available8.8 High
- gnome evinceCommand injection in evince via filename when printing to PDF. This affects versions earlier than...CVE-2017-1000159Fix available7.8 High
- gnome nautilus, debian linux +1 moreGNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file...CVE-2017-14604Fix available6.5 Medium
- Show moreLoading…