Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu grep, opensuse +1 moreThe bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a...CVE-2015-1345Fix available2.1 Low
- gnu glibc, canonical ubuntu linux +1 moreThe ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21...CVE-2015-1473Fix available6.4 Medium
- gnu patch, debian linux +1 moreA Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can...CVE-2015-1396Fix available7.5 High
- gnu patch, canonical ubuntu linux, fedoraproject fedora +2 moreDirectory traversal vulnerability in GNU patch versions which support Git-style patching before 2...CVE-2015-1395Fix availableEPSS 11.3%7.5 High
- gnu patch, opensuse, oracle solaris +2 moreGNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a...CVE-2015-1196Fix available4.3 Medium
- gnu binutils, canonical ubuntu linux, debian linux +1 more +3 moreThe _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier...CVE-2014-8738Fix available5.0 Medium
- gnu patch, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreGNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory...CVE-2014-9637Fix available5.5 Medium
- gnu gnupg, libgcrypt, debian linux +2 moreLibgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal...CVE-2014-3591Fix available4.2 Medium
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreMultiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users...CVE-2014-8737Fix available3.6 Low
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and...CVE-2014-8504Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreStack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and...CVE-2014-8503Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreHeap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24...CVE-2014-8502Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows...CVE-2014-8501Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote...CVE-2014-8485Fix available7.5 High
- gnu binutils, canonical ubuntu linux, fedoraproject fedora +2 moreThe srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote...CVE-2014-8484Fix available5.0 Medium
- gnu cpio, debian linux +1 moreHeap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote...CVE-2014-9112Fix available5.0 Medium
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 Medium
- gnu wgetAbsolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows...CVE-2014-4877Fix availableEPSS 39.9%9.3 High
- gnu eglibc, glibc +1 moreInteger signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental...CVE-2011-2702Public exploit6.8 Medium
- gnu coreutils, canonical ubuntu linux +1 moreThe parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service...CVE-2014-9471Fix available7.5 High
- gnu bashGNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of...CVE-2014-6278In KEVPublic exploitFix availableEPSS 99.7%10.0 High
- gnu bashGNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of...CVE-2014-6277Public exploitFix availableEPSS 64.3%10.0 High
- gnu bashOff-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026...CVE-2014-7187Public exploitFix availableEPSS 58.5%10.0 High
- gnu bashThe redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote...CVE-2014-7186Public exploitFix availableEPSS 64.3%10.0 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- gnu readline, fedoraproject fedora, mageia +1 more +3 moreThe _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create...CVE-2014-2524Fix available3.3 Low
- gnu libgfortranMultiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code...CVE-2014-5044Fix available9.8 Critical
- gnu gpgme, canonical ubuntu linux, debian linux +2 moreMultiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2)...CVE-2014-3564Fix available6.8 Medium
- gnu libtasn1, canonical ubuntu linux, debian linux +1 more +3 moreStack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers...CVE-2015-2806Fix available10.0 High
- gnu glibcMultiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20...CVE-2014-0475Fix available6.8 Medium
- gnu glibc, opensuse +1 moreThe posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path...CVE-2014-4043Fix available7.5 High
- gnu gnutls, debian linux, redhat enterprise linux +2 moreGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...CVE-2015-0294Fix available7.5 High
- gnu gnutlsGnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...CVE-2015-0282Fix available5.0 Medium
- gnu gnutlsGnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates,...CVE-2014-81554.3 Medium
- gnu gnutlsThe gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x...CVE-2014-3465Fix available5.0 Medium
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- gnu gnutlsBuffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1...CVE-2014-3466Public exploitFix availableEPSS 11.2%6.8 Medium
- gnu grubA certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows...CVE-2013-4577Fix available2.1 Low
- gnu rushGNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files...CVE-2013-6889Fix available4.9 Medium
- gnu emacs, mageia project mageia +1 morelisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary...CVE-2014-34243.3 Low
- gnu emacs, mageia project mageia +1 morelisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary...CVE-2014-34233.3 Low
- gnu emacs, mageia project mageia +1 morelisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite...CVE-2014-34223.3 Low
- gnu emacs, mageia project mageia +1 morelisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary...CVE-2014-34213.3 Low
- gnu a2psThe fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows...CVE-2014-0466Fix available6.8 Medium
- gnu a2psThe tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user...CVE-2001-1593Fix available2.1 Low
- gnu gnutlsGnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats...CVE-2009-51385.8 Medium
- gnu gnutlslib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle...CVE-2014-0092Fix availableEPSS 29.9%5.8 Medium
- Show moreLoading…