gnu Vulnerability Advisory Catalog

Total 1,112 security vulnerabilities recorded for gnu software and firmware.

← Back to All Vendors
Component: binutils

An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malforme...

📅 2026-03-06
CVSS 5.0 Dossier →
Component: inetutils

telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the log...

📅 2026-02-27
CVSS 7.4 Dossier →
CVE-2026-24061 CRITICAL
Component: inetutils

telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable....

📅 2026-01-21
CVSS 9.8 Dossier →
Component: glibc

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uni...

📅 2026-01-20
CVSS 7.5 Dossier →
Component: glibc

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-va...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: glibc

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 ...

📅 2026-01-14
CVSS 8.4 Dossier →
Component: wget2

A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-c...

📅 2026-01-09
CVSS 7.6 Dossier →
Component: wget2

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metal...

📅 2026-01-09
CVSS 8.8 Dossier →
Component: libtasn1

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1...

📅 2026-01-07
CVSS 7.5 Dossier →
Component: recutils

A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty...

📅 2025-12-30
CVSS 7.5 Dossier →
Component: binutils

An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE fil...

📅 2025-12-29
CVSS 7.5 Dossier →
Component: binutils

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafte...

📅 2025-12-29
CVSS 7.5 Dossier →
Component: binutils

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafte...

📅 2025-12-29
CVSS 7.5 Dossier →
Component: binutils

An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted P...

📅 2025-12-29
CVSS 7.5 Dossier →
Component: binutils

A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted...

📅 2025-12-29
CVSS 7.5 Dossier →
Component: binutils

An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via craf...

📅 2025-12-29
CVSS 2.5 Dossier →
Component: grub2

A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remain...

📅 2025-11-18
CVSS 7.8 Dossier →
Component: libmicrohttpd

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master bra...

📅 2025-11-10
CVSS 7.5 Dossier →
Component: libmicrohttpd

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master bra...

📅 2025-11-10
CVSS 7.5 Dossier →
Component: binutils

A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can le...

📅 2025-10-16
CVSS 3.3 Dossier →
Component: binutils

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results ...

📅 2025-10-16
CVSS 3.3 Dossier →
Component: binutils

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of th...

📅 2025-10-08
CVSS 3.3 Dossier →
Component: binutils

A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component ...

📅 2025-10-08
CVSS 3.3 Dossier →
Component: binutils

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of t...

📅 2025-10-07
CVSS 3.3 Dossier →
Page 3 of 47 (1,112 Total Records)