gnu Vulnerability Advisory Catalog

Total 1,112 security vulnerabilities recorded for gnu software and firmware.

← Back to All Vendors
Component: binutils

An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling ...

📅 2018-06-22
CVSS 5.5 Dossier →
Component: glibc

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the targe...

📅 2018-05-18
CVSS 7.8 Dossier →
CVE-2018-11236 CRITICAL
Component: glibc

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath functio...

📅 2018-05-18
CVSS 9.8 Dossier →
CVE-2017-18269 CRITICAL
Component: glibc

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.2...

📅 2018-05-18
CVSS 9.8 Dossier →
CVE-2018-0494 MEDIUM
Component: wget

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line....

📅 2018-05-06
CVSS 6.5 Dossier →
Component: binutils

The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not valid...

📅 2018-04-29
CVSS 5.5 Dossier →
Component: binutils

The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Bi...

📅 2018-04-29
CVSS 5.5 Dossier →
Component: binutils

concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to ...

📅 2018-04-25
CVSS 6.5 Dossier →
Component: binutils

process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application ...

📅 2018-04-25
CVSS 5.5 Dossier →
CVE-2018-9996 MEDIUM
Component: binutils

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions ...

📅 2018-04-10
CVSS 5.5 Dossier →
Component: patch

GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) ...

📅 2018-04-06
CVSS 7.8 Dossier →
CVE-2018-9138 MEDIUM
Component: binutils

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling f...

📅 2018-03-30
CVSS 5.5 Dossier →
CVE-2018-8945 MEDIUM
Component: binutils

The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remo...

📅 2018-03-22
CVSS 5.5 Dossier →
CVE-2014-5044 CRITICAL
Component: libgfortran

Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application cra...

📅 2018-03-07
CVSS 9.8 Dossier →
Component: binutils

The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and applicati...

📅 2018-03-02
CVSS 7.8 Dossier →
CVE-2018-7642 MEDIUM
Component: binutils

The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote...

📅 2018-03-02
CVSS 5.5 Dossier →
CVE-2018-7570 MEDIUM
Component: binutils

The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu...

📅 2018-02-28
CVSS 5.5 Dossier →
CVE-2018-7569 MEDIUM
Component: binutils

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of s...

📅 2018-02-28
CVSS 5.5 Dossier →
CVE-2018-7568 MEDIUM
Component: binutils

The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attack...

📅 2018-02-28
CVSS 5.5 Dossier →
CVE-2017-18201 CRITICAL
Component: libcdio

An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c....

📅 2018-02-26
CVSS 9.8 Dossier →
Component: libcdio

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted is...

📅 2018-02-24
CVSS 6.5 Dossier →
Component: libcdio

print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or ...

📅 2018-02-24
CVSS 8.8 Dossier →
Component: binutils

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an ind...

📅 2018-02-18
CVSS 7.8 Dossier →
Component: patch

A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6....

📅 2018-02-13
CVSS 7.5 Dossier →
Page 24 of 47 (1,112 Total Records)