Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu binutils, netapp ontap select deploy administration utility +1 moreA double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU...CVE-2020-16590Fix available5.5 Medium
- gnu glibc, netapp cloud backup, solidfire baseboard management controller +4 more +6 moresysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has...CVE-2020-29573Fix available7.5 High
- gnu glibc, fedoraproject fedora, netapp e-series santricity os controller +3 more +5 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4...CVE-2020-29562Fix available4.8 Medium
- gnu glibcmanual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the...CVE-1999-0199Fix available9.8 Critical
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...CVE-2020-24659Fix available7.5 High
- gnu bisonGNU Bison 3.7 has a use after free (UAF) vulnerability. A local attacker may execute bison with...CVE-2020-24240Fix available5.5 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shimCVE-2020-15705Fix available6.4 Medium
- debian linux, gnu grub2, canonical ubuntu linux +13 more +15 moreGRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.CVE-2020-15707Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, debian linux +12 more +14 moreGRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.CVE-2020-15706Fix available6.4 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A...CVE-2020-14311Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a...CVE-2020-14310Fix available5.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreThere's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems...CVE-2020-14309Fix available6.7 Medium
- gnu grub2, open source grub, opensuse leap +2 moreIn grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic...CVE-2020-14308Fix available6.4 Medium
- gnu grub2, open source grub, debian linux +2 more +4 moreA flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack...CVE-2020-10713Public exploitFix available8.2 High
- gnu libredwgGNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.CVE-2020-158076.5 Medium
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the...CVE-2019-209097.5 High
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based...CVE-2019-209108.1 High
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of...CVE-2019-209116.5 Medium
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack...CVE-2019-209128.8 High
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based...CVE-2019-209138.1 High
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the...CVE-2019-209149.8 Critical
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based...CVE-2019-209158.1 High
- gnu mailman, canonical ubuntu linux, debian linux +2 moreGNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private...CVE-2020-15011Fix available4.3 Medium
- gnu bisonGNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash).CVE-2020-14150Fix available5.5 Medium
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the...CVE-2017-9109Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a...CVE-2017-9108Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with...CVE-2017-9107Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general...CVE-2017-9106Fix available7.5 High
- gnu adns, fedoraproject fedora +1 moreAn issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks...CVE-2017-9105Fix available8.8 High
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop...CVE-2017-9104Fix available9.8 Critical
- gnu adns, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from...CVE-2017-9103Fix available9.8 Critical
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of...CVE-2020-13777Public exploitFix availableEPSS 22.5%7.4 High
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Fix available6.5 Medium
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...CVE-2020-12137Fix available6.1 Medium
- gnu gnutls, canonical ubuntu linux, debian linux +5 more +7 moreGnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is...CVE-2020-11501Fix available7.4 High
- gnu glibc, debian linux, fedoraproject fedora +3 more +5 moreAn exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU...CVE-2020-6096Fix available8.1 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +3 more +5 moreAn out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal...CVE-2020-1751Fix available5.1 Medium
- gnu patchGNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function...CVE-2019-20633Fix available5.5 Medium
- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...CVE-2020-1752Fix available7.0 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...CVE-2020-10029Fix available5.5 Medium
- gnu screenA buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49....CVE-2020-9366Fix available9.8 Critical
- gnu aspelllibaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single ...CVE-2019-20433Fix available9.1 Critical
- gnu gnump3d, opensuse leap, leap 15.1 +2 moreLocal privilege escalation from user gnump3d to rootCVE-2019-36977.7 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.CVE-2020-66098.8 High
- gnu libredwg, opensuse backports, leap +2 moreGNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in...CVE-2020-66106.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-66116.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in...CVE-2020-66128.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-66138.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-66148.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c...CVE-2020-66156.5 Medium
- Show moreLoading…