Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`CVE-2023-25588Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `file_table` of `struct module *module` is uninitializedCVE-2023-25585Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreOut of bounds read in parse_module function in bfd/vms-alpha.cCVE-2023-25584Fix available6.3 Medium
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- gnu less, fedoraproject fedora +1 moreIn GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences...CVE-2022-46663Fix available7.5 High
- gnu c library, glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA vulnerability was found in GNU C Library 2.38. It has been declared as critical. This...CVE-2023-0687Fix availableDisputed4.6 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moresprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some...CVE-2023-25139Fix available9.8 Critical
- gnu tar, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized...CVE-2022-48303Fix available5.5 Medium
- gnu binutils, fedoraproject fedora, redhat enterprise linux +2 moreAn illegal memory access flaw was found in the binutils package. Parsing an ELF file containing...CVE-2022-4285Fix available5.5 Medium
- gnu libredwgLibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function...CVE-2022-453327.8 High
- gnu emacs, debian linux, fedoraproject fedora +2 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-45939Fix available7.8 High
- gnu bash, redhat enterprise linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the bash package, where a heap-buffer overflow can occur in valid...CVE-2022-3715Fix available7.8 High
- gnu grub2, redhat enterprise linux +1 moreWhen rendering certain unicode sequences, grub2's font code doesn't proper validate if the...CVE-2022-3775Fix available7.1 High
- fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 moreA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...CVE-2022-2601Fix available8.6 High
- gnu libtasn1, debian linux, fedoraproject fedora +3 more +5 moreGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...CVE-2021-46848Fix available9.1 Critical
- gnu mailmanMailman Core vulnerable to timing attacksCVE-2021-34337Fix available6.3 Medium
- gnu osipGNU oSIP v5.3.0 was discovered to contain an integer overflow via the component...CVE-2022-41550Fix available6.5 Medium
- gnu pspp, fedoraproject fedora +1 moreAn issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function...CVE-2022-39831Fix available7.8 High
- gnu pspp, fedoraproject fedora +1 moreAn issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function...CVE-2022-39832Fix available7.8 High
- fedoraproject fedora, gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreHeap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows...CVE-2021-3826Fix available6.5 Medium
- gnu glibc, netapp h300s firmware, h410c firmware +4 more +6 moreAn issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a...CVE-2022-39046Fix available7.5 High
- debian linux, gnu inetutils, mit kerberos 5 +1 more +3 moretelnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a...CVE-2022-39028Fix available7.5 High
- gnu binutils, fedoraproject fedora +1 moreIn GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32...CVE-2022-38533Fix available5.5 Medium
- gnu libredwgLibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via...CVE-2022-35164Fix available9.8 Critical
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...CVE-2022-2509Fix available7.5 High
- gnu sasl, debian linux +1 moreGNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API clientCVE-2022-2469Fix available3.8 Low
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at...CVE-2022-330347.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at...CVE-2022-330337.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function...CVE-2022-330327.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function...CVE-2022-330257.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function...CVE-2022-330287.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function...CVE-2022-330277.8 High
- gnu libredwgLibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function...CVE-2022-330267.8 High
- gnu libredwgThere is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int,...CVE-2022-330247.5 High
- gnu grub2, gnu project grub +1 moreThere's a use-after-free vulnerability in grub_cmd_chainloader() functionCVE-2022-28736Fix available6.4 Medium
- gnu grub2, gnu project grub +1 moreThe GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot...CVE-2022-28735Fix available6.7 Medium
- gnu grub2, gnu project grub, netapp active iq unified manager +2 moreOut-of-bounds write when handling split HTTP headersCVE-2022-28734Fix available8.1 High
- gnu project grub, gnu grub2 +1 moreInteger underflow in grub_net_recv_ip4_packetsCVE-2022-28733Fix available8.1 High
- gnu grub2, redhat codeready linux builder, developer tools +9 more +11 moreA crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user...CVE-2021-3697Fix available7.0 High
- gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreA heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader....CVE-2021-3696Fix available4.5 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 moreA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...CVE-2021-3695Fix available4.5 Medium
- gnu libredwgA heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4...CVE-2021-425868.8 High
- gnu libredwgA heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread...CVE-2021-425858.8 High
- gnu gzip, debian linux, redhat jboss data grid +5 more +7 moreAn arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...CVE-2022-1271Fix available8.8 High
- gnu gcc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morelibiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as...CVE-2022-27943Fix available5.5 Medium
- gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 moregrub2-once uses fixed file name in /var/tmpCVE-2021-46705Fix available5.1 Medium
- gnu grub2, fedoraproject fedora +1 moreA flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...CVE-2021-3981Fix available3.3 Low
- gnu fribidi, redhat enterprise linux +1 moreA segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...CVE-2022-25310Fix available5.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA heap-based buffer overflow flaw was found in the Fribidi package and affects the...CVE-2022-25309Fix available5.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker...CVE-2022-25308Fix available7.8 High
- Show moreLoading…