Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu gnutls, netapp active iq unified manager, hci bootstrap os +5 more +7 moreA NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally...CVE-2021-4209Fix available6.5 Medium
- gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 moreA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...CVE-2021-3999Fix available7.8 High
- gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 moreA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...CVE-2021-3998Fix available7.5 High
- gnu recutils, fedoraproject fedora +1 moreAn Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90...CVE-2021-46021Fix available5.5 Medium
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust...CVE-2021-46195Fix available5.5 Medium
- gnu glibc, debian linux, oracle communications cloud native core binding support function +8 more +10 moreThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka...CVE-2022-23219Fix available9.8 Critical
- gnu glibc, debian linux, oracle communications cloud native core unified data repository +4 more +6 moreThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ...CVE-2022-23218Fix available9.8 Critical
- gnu recutils, fedoraproject fedora +1 moreAn Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90...CVE-2021-46022Fix available5.5 Medium
- gnu recutils, fedoraproject fedora +1 moreAn untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead...CVE-2021-46019Fix available5.5 Medium
- gnu libredwgLibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private ...CVE-2021-459506.5 Medium
- gnu patchAn Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which...CVE-2021-45261Fix available5.5 Medium
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...CVE-2021-45078Fix available7.8 High
- gnu libredwgLibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.CVE-2021-28237Fix available9.8 Critical
- gnu libredwgLibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.CVE-2021-282367.5 High
- gnu mailman, debian linux +1 moreCross Site Request Forgery in mailmanCVE-2021-44227Fix available8.8 High
- gnu gcc, binutils +1 moreGCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component...CVE-2021-37322Fix available7.8 High
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an...CVE-2021-43332Fix available6.5 Medium
- gnu mailman, debian linux +1 moreIn GNU Mailman before 2.1.36, a crafted URL to the Cgi/options.py user options page can execute...CVE-2021-43331Fix available6.1 Medium
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification...CVE-2021-434127.8 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among...CVE-2021-434138.8 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol...CVE-2021-434147.0 High
- gnu hurdAn issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid...CVE-2021-434117.5 High
- gnu glibc, oracle communications cloud native core binding support function, communications cloud native core network function cloud native environment +7 more +9 moreIn iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force...CVE-2021-43396Fix availableDisputed7.5 High
- gnu mailman, debian linux +1 moreGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrf_token value is not...CVE-2021-42097Fix available8.0 High
- gnu mailman, debian linux +1 moreGNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrf_token value is...CVE-2021-42096Fix available4.3 Medium
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap...CVE-2021-395258.8 High
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in...CVE-2021-395236.5 Medium
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a...CVE-2021-395278.8 High
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec...CVE-2021-395288.8 High
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap...CVE-2021-395308.8 High
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap...CVE-2021-395228.8 High
- gnu libredwgAn issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in...CVE-2021-395216.5 Medium
- gnu inetutils, debian linux +1 moreThe ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV...CVE-2021-40491Fix available6.5 Medium
- gnu glibc, fedoraproject fedora, oracle communications cloud native core binding support function +8 more +10 moreIn librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c...CVE-2021-38604Fix available7.5 High
- gnu cpioGNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file,...CVE-2021-38185Public exploitFix available7.8 High
- gnu glibc, debian linux, netapp active iq unified manager +7 more +9 moreThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...CVE-2021-35942Fix available9.1 Critical
- gnu aspell, debian linux, fedoraproject fedora +2 moreobjstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top ...CVE-2019-25051Fix available7.8 High
- gnu libredwgGNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from...CVE-2021-360808.8 High
- gnu binutils, netapp ontap select deploy administration utility +1 moreA flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed...CVE-2021-3530Fix available7.5 High
- gnu gamaA NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04...CVE-2020-183957.5 High
- gnu binutilsAn out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could...CVE-2021-3549Fix available7.1 High
- gnu glibc, debian linux, fedoraproject fedora +13 more +15 moreThe mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...CVE-2021-33574Fix available9.8 Critical
- gnu libredwgA heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page...CVE-2020-238615.5 Medium
- gnu cflow, fedoraproject fedora +1 moreUse-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src...CVE-2020-23856Fix available5.5 Medium
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...CVE-2020-218318.8 High
- gnu libredwgGNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code ...CVE-2020-218448.8 High
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src...CVE-2020-218438.8 High
- gnu libredwgA heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via...CVE-2020-218428.8 High
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src...CVE-2020-218418.8 High
- gnu libredwgA heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../...CVE-2020-218408.8 High
- Show moreLoading…