Skip to contentGnu vulnerabilities
Products
Show 28 moreShow less
Newest
- gnu binutilsGNU Binutils ld xmemdup.c xmemdup memory leakCVE-2025-1151Fix available2.3 Low
- gnu binutilsGNU Binutils ld libbfd.c bfd_malloc memory leakCVE-2025-1150Fix available2.3 Low
- gnu binutilsGNU Binutils ld xmalloc.c xstrdup memory leakCVE-2025-1149Fix available2.3 Low
- gnu binutilsGNU Binutils ld ldelfgen.c link_order_scan memory leakCVE-2025-1148Fix available2.3 Low
- gnu binutilsGNU Binutils nm nm.c internal_strlen buffer overflowCVE-2025-1147Fix available2.3 Low
- gnu binutilsGNU Binutils objdump.c disassemble_bytes stack-based overflowCVE-2025-0840Fix available6.3 Medium
- gnu grub2GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp...CVE-2024-56738Fix available5.3 Medium
- gnu grub2GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock...CVE-2024-56737Fix available8.8 High
- gnu emacsIn elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at...CVE-2024-53920Fix available7.8 High
- gnu wgetGNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLsCVE-2024-10524Fix available6.5 Medium
- gnu guixguix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are...CVE-2024-52867Fix available8.1 High
- gnu scientific libraryGSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many...CVE-2024-50610Fix available3.6 Low
- gnu emacsIn Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when...CVE-2024-39331Fix available9.8 Critical
- gnu globalhtags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is...CVE-2024-38448Fix available9.1 Critical
- gnu wgeturl.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and...CVE-2024-38428Fix available9.1 Critical
- gnu libcdioBuffer Overflow Vulnerability in libcdio v2.1.0 allows an attacker to execute arbitrary code via...CVE-2024-36600Fix available8.4 High
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned fileCVE-2024-5742Fix available6.7 Medium
- gnu glibc, debian linux, netapp element software +11 more +13 morenscd: netgroup cache assumes NSS callback uses in-buffer stringsCVE-2024-33602Fix available7.4 High
- gnu glibc, debian linux, netapp h300s firmware +11 more +13 morenscd: netgroup cache may terminate daemon on memory allocation failureCVE-2024-33601Fix available7.3 High
- gnu glibc, debian linux, netapp active iq unified manager +12 more +14 morenscd: Null pointer crashes after notfound responseCVE-2024-33600Fix available5.9 Medium
- gnu glibc, debian linux, netapp h300s firmware +8 more +10 morenscd: Stack-based buffer overflow in netgroup cacheCVE-2024-33599Fix available8.1 High
- debian linux, gnu glibc, netapp active iq unified manager +13 more +15 moreThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer...CVE-2024-2961Public exploitFix availableEPSS 88.3%7.3 High
- gnu savaneAn issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute...CVE-2024-29399Public exploit7.6 High
- gnu savaneAn issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the...CVE-2024-27632Public exploit8.8 High
- gnu savaneCross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker...CVE-2024-27631Public exploit6.0 Medium
- gnu savaneInsecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker...CVE-2024-27630Public exploit7.5 High
- gnu grub2, debian based gnu grub, netapp bootstrap os +2 moreGRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2...CVE-2024-2312Fix available6.7 Medium
- gnu emacs, org mode, debian linux +2 moreIn Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...CVE-2024-30205Fix available7.1 High
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.CVE-2024-30204Fix available2.8 Low
- gnu emacs, debian linux, gnu org mode +2 moreIn Emacs before 29.3, Gnus treats inline MIME contents as trusted.CVE-2024-30203Fix available5.5 Medium
- gnu emacs, org mode +1 moreIn Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This...CVE-2024-30202Fix available7.8 High
- gnu grub2, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreGrub2: grub2-set-bootflag can be abused by local (pseudo-)usersCVE-2024-1048Fix available3.3 Low
- gnu indentIndent: heap-based buffer overflow in set_buf_break()CVE-2024-0911Fix available5.5 Medium
- gnu cpio, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreCpio: extraction allows symlinks which enables remote command executionCVE-2023-72165.3 Medium
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: integer overflow in __vsyslog_internal()CVE-2023-6780Fix available5.3 Medium
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()CVE-2023-6779Fix available8.2 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: heap-based buffer overflow in __vsyslog_internal()CVE-2023-6246Public exploitFix available8.4 High
- gnu coreutils, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreCoreutils: heap overflow in split --line-bytes with very long linesCVE-2024-0684Public exploitFix available5.5 Medium
- gnu gnutls, debian linux, fedoraproject fedora +10 more +12 moreGnutls: rejects certificate chain with distributed trustCVE-2024-0567Fix available7.5 High
- gnu gnutls, fedoraproject fedora, red hat enterprise linux 6 +10 more +12 moreGnutls: incomplete fix for cve-2023-5981CVE-2024-0553Fix available7.5 High
- gnu grub2, fedoraproject fedora, red hat enterprise linux 8 +4 more +6 moreGrub2: bypass the grub password protection featureCVE-2023-4001Fix available6.8 Medium
- debian cpioDebian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE...CVE-2023-7207Fix available4.9 Medium
- gnu libredwgVersions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due...CVE-2023-26157Fix available5.5 Medium
- gnu tarIn GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an...CVE-2023-39804Fix available6.2 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- free software foundation grub-legacy, gnu grub, xen +2 moreMemory Corruption Vulnerability in Grub-Legacy's XFS ImplementationCVE-2023-49498.1 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds read at fs/ntfs.cCVE-2023-4693Fix available5.3 Medium
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code executionCVE-2023-4692Fix available7.5 High
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.cCVE-2023-5156Fix available7.5 High
- Show moreLoading…