Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200096.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in...CVE-2019-200118.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200126.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200136.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.CVE-2019-200148.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200156.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in...CVE-2019-200108.8 High
- [unknown] grub2A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this...CVE-2019-14865Fix available5.9 Medium
- gnu bash, netapp hci management node, oncommand unified manager +5 more +7 moreAn issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By...CVE-2019-18276Public exploitFix available7.8 High
- gnu serveezGNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to...CVE-2019-162007.5 High
- gnu gnusoundgnusound 0.7.5 has format string issueCVE-2012-08249.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +4 more +6 moreOn the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the...CVE-2019-19126Fix available3.3 Low
- gnu mailutilsmaidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in...CVE-2019-18862Public exploitFix available7.8 High
- gnu fribidi, debian linux +1 moreA buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of...CVE-2019-18397Fix available7.8 High
- gnu cpio, redhat enterprise linux +1 moreIn all versions of cpio before 2.13 does not properly validate input files when generating TAR...CVE-2019-14866Fix available6.7 Medium
- gnu gccInteger overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified...CVE-2002-24397.8 High
- gnu libidn2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2...CVE-2019-12290Fix available7.5 High
- gnu libidn2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreidn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via...CVE-2019-18224Fix available9.8 Critical
- gnu guixGNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the...CVE-2019-181927.8 High
- gnu aspell, canonical ubuntu linux +1 morelibaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape...CVE-2019-17544Fix available9.1 Critical
- gnu binutils, canonical ubuntu linux, opensuse leap +2 morefind_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...CVE-2019-17450Fix available6.5 Medium
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-17451Fix available6.5 Medium
- gnu cflowGNU cflow through 1.6 has a use-after-free in the reference function in parser.c.CVE-2019-16165Fix available6.5 Medium
- gnu cflowGNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.CVE-2019-16166Fix available6.5 Medium
- gnu gcc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple...CVE-2019-15847Fix available7.5 High
- gnu chessIn GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend...CVE-2019-15767Fix available7.8 High
- gnu libextractor, debian linux, fedoraproject fedora +2 moreGNU Libextractor through 1.9 has a heap-based buffer over-read in the function...CVE-2019-15531Fix available6.5 Medium
- gnu exosiphandle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content...CVE-2014-103757.5 High
- gnu binutils, canonical ubuntu linux, netapp hci management node +2 more +4 moreapply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows...CVE-2019-14444Fix available5.5 Medium
- gnu patchdo_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a !...CVE-2018-20969Fix available7.8 High
- gnu gdb, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is:...CVE-2019-1010180Fix available7.8 High
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32....CVE-2019-14250Fix available5.5 Medium
- gnu binutils, binutils gold, gnu binutils gold +2 more +4 moreGNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input...CVE-2019-1010204Fix available5.5 Medium
- gnu patch, debian linux +1 moreGNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by...CVE-2019-13638Fix available7.8 High
- gnu patchIn GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than...CVE-2019-13636Fix available5.9 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap...CVE-2019-1010025Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The...CVE-2019-1010023Fix availableDisputed8.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using...CVE-2019-1010024Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack...CVE-2019-1010022Fix availableDisputed9.8 Critical
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-12972Fix available5.5 Medium
- gnu bash, redhat enterprise linux +1 moreA heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by...CVE-2012-6711Fix available7.0 High
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morestack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler...CVE-2018-128868.1 High
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a heap-based buffer overflow in the...CVE-2019-11640Fix available8.8 High
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a stack-based buffer overflow in the...CVE-2019-11639Fix available8.8 High
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function...CVE-2019-11638Fix available6.5 Medium
- gnu recutilsAn issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function...CVE-2019-11637Fix available6.5 Medium
- gnu glibcThe nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client...CVE-2006-7254Fix available5.5 Medium
- gnu glibcThe getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a...CVE-2005-3590Fix available9.8 Critical
- gnu wget, the gnu projec gnu wget +1 moreBuffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of...CVE-2019-5953Fix available9.8 Critical
- gnu gnutls, fedoraproject fedora, opensuse leap +2 moreIt was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer...CVE-2019-3836Fix available5.9 Medium
- Show moreLoading…