Gnu
Page 5 of 8 — Gnu CVEs from a corpus of 783, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-28968 | Medium | 5.4 | 2021-03-22 | An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag allows (with authentication) injecting arbitrary JavaScript into… |
CVE-2021-3418 | Medium | 6.4 | 2021-03-15 | If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kern… |
CVE-2021-20232 | Critical | 9.8 | 2021-03-12 | A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential conseque… |
CVE-2021-20231 | Critical | 9.8 | 2021-03-12 | A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences. |
CVE-2021-20233 | High | 8.2 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressi… |
CVE-2021-20225 | Medium | 6.7 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain c… |
CVE-2020-27779 | High | 7.5 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ra… |
CVE-2020-27749 | Medium | 6.7 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable content… |
CVE-2020-25647 | High | 7.6 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the US… |
CVE-2020-25632 | High | 8.2 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any oth… |
CVE-2020-14372 | High | 7.5 | 2021-03-03 | A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows a… |
CVE-2020-27618 | Medium | 5.5 | 2021-02-26 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388… |
CVE-2021-27645 | Low | 2.5 | 2021-02-24 | The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due… |
CVE-2021-26937 | Critical | 9.8 | 2021-02-09 | encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspe… |
CVE-2021-3326 | High | 7.5 | 2021-01-27 | The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an… |
CVE-2019-25013 | Medium | 5.9 | 2021-01-04 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a… |
CVE-2020-35507 | Medium | 5.5 | 2021-01-04 | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted… |
CVE-2020-35496 | Medium | 5.5 | 2021-01-04 | There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by o… |
CVE-2020-35495 | Medium | 5.5 | 2021-01-04 | There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer… |
CVE-2020-35494 | Medium | 6.1 | 2021-01-04 | There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninit… |
CVE-2020-35493 | Medium | 5.5 | 2021-01-04 | A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-… |
CVE-2020-35448 | Low | 3.3 | 2020-12-27 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occu… |
CVE-2020-16599 | Medium | 5.5 | 2020-12-09 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_… |
CVE-2020-16593 | Medium | 5.5 | 2020-12-09 | A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for… |
CVE-2020-16592 | Medium | 5.5 | 2020-12-09 | A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that… |
CVE-2020-16591 | Medium | 5.5 | 2020-12-09 | A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrat… |
CVE-2020-16590 | Medium | 5.5 | 2020-12-09 | A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readel… |
CVE-2020-29573 | High | 7.5 | 2020-12-06 | sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the print… |
CVE-2020-29562 | Medium | 4.8 | 2020-12-04 | The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion i… |
CVE-1999-0199 | Critical | 9.8 | 2020-10-06 | manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, whi… |
CVE-2020-24659 | High | 7.5 | 2020-09-04 | An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with u… |
CVE-2020-24240 | Medium | 5.5 | 2020-08-25 | GNU Bison before 3.7.1 has a use-after-free in _obstack_free in lib/obstack.c (called from gram_lex) when a '\0' byte is encountered. NOTE: there is a risk onl… |
CVE-2020-14311 | Medium | 5.7 | 2020-07-31 | There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT3… |
CVE-2020-14310 | Medium | 5.7 | 2020-07-31 | There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it… |
CVE-2020-14309 | Medium | 6.7 | 2020-07-30 | There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size… |
CVE-2020-10713 | High | 8.2 | 2020-07-30 | A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows… |
CVE-2020-14308 | Medium | 6.4 | 2020-07-29 | In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the functi… |
CVE-2020-15707 | Medium | 5.7 | 2020-07-29 | Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and… |
CVE-2020-15706 | Medium | 6.4 | 2020-07-29 | GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whil… |
CVE-2020-15705 | Medium | 6.4 | 2020-07-29 | GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel sig… |
CVE-2020-15807 | Medium | 6.5 | 2020-07-17 | GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files. |
CVE-2019-20915 | High | 8.1 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c. |
CVE-2019-20914 | Critical | 9.8 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entit… |
CVE-2019-20913 | High | 8.1 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec. |
CVE-2019-20912 | High | 8.8 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF. |
CVE-2019-20911 | Medium | 6.5 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop. |
CVE-2019-20910 | High | 8.1 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vu… |
CVE-2019-20909 | High | 7.5 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec. |
CVE-2020-15011 | Medium | 4.3 | 2020-06-24 | GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page. |
CVE-2017-9104 | Critical | 9.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered. |
CVE-2017-9103 | Critical | 9.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value c… |
CVE-2017-9109 | Critical | 9.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the se… |
CVE-2017-9108 | High | 7.5 | 2020-06-18 | An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r… |
CVE-2017-9107 | High | 7.5 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and adns_qf_quote… |
CVE-2017-9106 | High | 7.5 | 2020-06-18 | An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-si… |
CVE-2017-9105 | High | 8.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug… |
CVE-2020-14150 | Medium | 5.5 | 2020-06-15 | GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and… |
CVE-2020-13777 | High | 7.4 | 2020-06-04 | GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in T… |
CVE-2020-12108 | Medium | 6.5 | 2020-05-06 | /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. |
CVE-2020-1752 | High | 7.0 | 2020-04-30 | A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing a… |
CVE-2020-12137 | Medium | 6.1 | 2020-04-24 | GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against lis… |
CVE-2020-1751 | Medium | 5.1 | 2020-04-17 | An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not p… |
CVE-2020-11501 | High | 7.4 | 2020-04-03 | GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit… |
CVE-2020-6096 | High | 8.1 | 2020-04-01 | An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that util… |
CVE-2019-20633 | Medium | 5.5 | 2020-03-25 | GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a… |
CVE-2020-10029 | Medium | 5.5 | 2020-03-04 | The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function conta… |
CVE-2020-9366 | Critical | 9.8 | 2020-02-24 | A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt… |
CVE-2015-0294 | High | 7.5 | 2020-01-27 | GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. |
CVE-2019-20433 | Critical | 9.1 | 2020-01-27 | libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of… |
CVE-2015-4042 | Critical | 9.8 | 2020-01-24 | Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application… |
CVE-2015-4041 | High | 7.8 | 2020-01-24 | The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of by… |
CVE-2019-3697 | High | 7.7 | 2020-01-24 | UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to… |
CVE-2020-6615 | Medium | 6.5 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl). |
CVE-2020-6614 | High | 8.1 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. |
CVE-2020-6613 | High | 8.1 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. |
CVE-2020-6612 | High | 8.1 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. |
CVE-2020-6611 | Medium | 6.5 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c. |
CVE-2020-6610 | Medium | 6.5 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c. |
CVE-2020-6609 | High | 8.8 | 2020-01-08 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. |
CVE-2019-14866 | High | 7.3 | 2020-01-07 | In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an… |
CVE-2019-20015 | Medium | 6.5 | 2019-12-27 | An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec. |
CVE-2019-20014 | High | 8.8 | 2019-12-27 | An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. |
CVE-2019-20013 | Medium | 6.5 | 2019-12-27 | An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec. |
CVE-2019-20012 | Medium | 6.5 | 2019-12-27 | An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec. |
CVE-2019-20011 | High | 8.8 | 2019-12-27 | An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c. |
CVE-2019-20010 | High | 8.8 | 2019-12-27 | An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. |
CVE-2019-20009 | Medium | 6.5 | 2019-12-27 | An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.sp… |
CVE-2015-8313 | Medium | 5.9 | 2019-12-20 | GnuTLS incorrectly validates the first byte of padding in CBC modes |
CVE-2015-0837 | Medium | 5.9 | 2019-11-29 | The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when… |
CVE-2014-3591 | Medium | 4.2 | 2019-11-29 | Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to ob… |
CVE-2019-14865 | Medium | 5.9 | 2019-11-29 | A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), c… |
CVE-2019-18276 | High | 7.8 | 2019-11-28 | An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its re… |
CVE-2015-1396 | High | 7.5 | 2019-11-25 | A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file… |
CVE-2019-16200 | High | 7.5 | 2019-11-20 | GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-le… |
CVE-2019-19126 | Low | 3.3 | 2019-11-19 | On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program executio… |
CVE-2012-0824 | Critical | 9.8 | 2019-11-19 | gnusound 0.7.5 has format string issue |
CVE-2019-18397 | High | 7.8 | 2019-11-13 | A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial… |
CVE-2019-18862 | High | 7.8 | 2019-11-11 | maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode. |
CVE-2013-4412 | High | 7.5 | 2019-11-04 | slim has NULL pointer dereference when using crypt() method from glibc 2.17 |
CVE-2002-2439 | High | 7.8 | 2019-10-23 | Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. |