gnu Vulnerability Advisory Catalog

Total 1,112 security vulnerabilities recorded for gnu software and firmware.

← Back to All Vendors
Component: libredwg

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec....

📅 2019-03-14
CVSS 7.5 Dossier →
Component: libredwg

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c....

📅 2019-03-14
CVSS 7.5 Dossier →
Component: libredwg

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for th...

📅 2019-03-14
CVSS 7.5 Dossier →
CVE-2019-9211 MEDIUM
Component: pspp

There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that ...

📅 2019-02-27
CVSS 6.5 Dossier →
Component: glibc

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by ...

📅 2019-02-26
CVSS 7.5 Dossier →
CVE-2019-9169 CRITICAL
Component: glibc

In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-i...

📅 2019-02-26
CVSS 9.8 Dossier →
Component: glibc

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by ...

📅 2019-02-26
CVSS 7.5 Dossier →
Component: glibc

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a deni...

📅 2019-02-26
CVSS 7.5 Dossier →
Component: binutils

An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option sec...

📅 2019-02-24
CVSS 7.8 Dossier →
CVE-2019-9076 MEDIUM
Component: binutils

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive me...

📅 2019-02-24
CVSS 5.5 Dossier →
Component: binutils

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overf...

📅 2019-02-24
CVSS 7.8 Dossier →
CVE-2019-9074 MEDIUM
Component: binutils

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read lea...

📅 2019-02-24
CVSS 5.5 Dossier →
CVE-2019-9073 MEDIUM
Component: binutils

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive me...

📅 2019-02-24
CVSS 5.5 Dossier →
CVE-2019-9072 MEDIUM
Component: binutils

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive me...

📅 2019-02-24
CVSS 5.5 Dossier →
CVE-2019-9071 MEDIUM
Component: binutils

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-deman...

📅 2019-02-24
CVSS 5.5 Dossier →
Component: binutils

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c ...

📅 2019-02-24
CVSS 7.8 Dossier →
CVE-2019-7309 MEDIUM
Component: glibc

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the ...

📅 2019-02-03
CVSS 5.5 Dossier →
Component: glibc

In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address foll...

📅 2019-01-21
CVSS 5.3 Dossier →
Component: glibc

The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bi...

📅 2019-01-18
CVSS 7.8 Dossier →
CVE-2019-6460 MEDIUM
Component: recutils

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in libre...

📅 2019-01-16
CVSS 6.5 Dossier →
CVE-2019-6459 MEDIUM
Component: recutils

An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a....

📅 2019-01-16
CVSS 6.5 Dossier →
CVE-2019-6458 MEDIUM
Component: recutils

An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in lib...

📅 2019-01-16
CVSS 6.5 Dossier →
CVE-2019-6457 MEDIUM
Component: recutils

An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a....

📅 2019-01-16
CVSS 6.5 Dossier →
CVE-2019-6456 MEDIUM
Component: recutils

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a....

📅 2019-01-16
CVSS 6.5 Dossier →
Page 21 of 47 (1,112 Total Records)