Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...CVE-2017-83927.5 High
- gnu gnutlsGnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based...CVE-2017-7869Fix available7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer...CVE-2017-7853Fix available7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the...CVE-2016-10326Fix available7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the...CVE-2016-10325Fix available7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the...CVE-2016-10324Fix available9.8 Critical
- gnu a2psFormat string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.CVE-2015-8107Fix available7.8 High
- gnu binutilselflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...CVE-2017-7614Fix available9.8 Critical
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...CVE-2017-7304Fix available7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...CVE-2017-7303Fix available7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a...CVE-2017-7302Fix available7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has...CVE-2017-7301Fix available7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has...CVE-2017-7300Fix available7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has...CVE-2017-7299Fix available5.5 Medium
- gnu bashThe path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted...CVE-2017-5932Fix available7.8 High
- gnu binutilsGNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while...CVE-2017-7227Fix available7.5 High
- gnu binutilsThe pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as...CVE-2017-7226Fix available9.1 Critical
- gnu binutilsThe find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where...CVE-2017-7225Fix available7.5 High
- gnu binutilsThe find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write ...CVE-2017-7224Fix available5.5 Medium
- gnu binutilsGNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while...CVE-2017-7223Fix available7.5 High
- gnu binutilsobjdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1...CVE-2017-7210Fix available5.5 Medium
- gnu binutilsThe dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while...CVE-2017-7209Fix available5.5 Medium
- gnu screenGNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root...CVE-2017-5618Fix available7.8 High
- gnu glibcThe pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent...CVE-2015-8985Fix available5.9 Medium
- gnu binutilsreadelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing...CVE-2017-6969Fix available9.1 Critical
- gnu binutilsreadelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while...CVE-2017-6966Fix available5.5 Medium
- gnu binutilsreadelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files...CVE-2017-6965Fix available5.5 Medium
- gnu wgetCRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows...CVE-2017-6508Fix available6.1 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreThe iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with...CVE-2016-10228Fix available5.9 Medium
- gnu libibertyThe d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial...CVE-2016-4491Fix available5.5 Medium
- gnu ed, fedoraproject fedora +1 moreregex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a...CVE-2017-5357Fix available7.5 High
- gnu glibcMemory leak in the __res_vinit function in the IPv6 name server management code in libresolv in...CVE-2016-5417Fix available7.5 High
- gnu coreutilschroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent...CVE-2016-2781Fix available6.5 Medium
- gnu gnutls, opensuse leap +1 moreMultiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3...CVE-2017-5337Fix available9.8 Critical
- gnu gnutls, opensuse leap +1 moreStack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS...CVE-2017-5336Fix available9.8 Critical
- gnu gnutls, opensuse leap +1 moreThe stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x...CVE-2017-5335Fix available7.5 High
- gnu gnutls, opensuse leap +1 moreDouble free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26...CVE-2017-5334Fix availableEPSS 32.8%9.8 Critical
- gnu bash, debian linux, redhat enterprise linux desktop +5 more +7 morepopd in bash might allow local users to bypass the restricted shell and cause a use-after-free...CVE-2016-9401Fix available5.5 Medium
- gnu chessStack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka...CVE-2015-8972Fix available9.8 Critical
- gnu tarDirectory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29...CVE-2016-6321Fix availableEPSS 15.7%7.5 High
- gnu bash, fedoraproject fedora +1 moreBash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted...CVE-2016-7543Fix available8.4 High
- gnu guile, fedoraproject fedora +1 moreThe REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via...CVE-2016-8606Fix available9.8 Critical
- gnu guile, fedoraproject fedora +1 moreThe mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time...CVE-2016-8605Fix available5.3 Medium
- gnu glibc, fedoraproject fedora, opensuse +2 moreThe makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution...CVE-2016-6323Fix available7.5 High
- gnu gnutlsThe gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x...CVE-2016-7444Fix available7.5 High
- gnu wgetRace condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a...CVE-2016-7098Public exploitFix available8.1 High
- gnu bashThe expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to...CVE-2016-0634Fix available7.5 High
- gnu mailmanCross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before...CVE-2016-71238.8 High
- gnu mailmanCross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x...CVE-2016-6893Fix available8.8 High
- gnu libidnThe stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context...CVE-2016-6263Fix available7.5 High
- Show moreLoading…