gnu Vulnerability Advisory Catalog

Total 1,112 security vulnerabilities recorded for gnu software and firmware.

← Back to All Vendors
Component: gnutls

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function ...

📅 2017-04-14
CVSS 7.5 Dossier →
Component: osip

In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in o...

📅 2017-04-13
CVSS 7.5 Dossier →
Component: osip

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/os...

📅 2017-04-13
CVSS 7.5 Dossier →
Component: osip

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser...

📅 2017-04-13
CVSS 7.5 Dossier →
CVE-2016-10324 CRITICAL
Component: osip

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_p...

📅 2017-04-13
CVSS 9.8 Dossier →
Component: a2ps

Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code....

📅 2017-04-13
CVSS 7.8 Dossier →
CVE-2017-7614 CRITICAL
Component: binutils

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" und...

📅 2017-04-09
CVSS 9.8 Dossier →
Component: binutils

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of mi...

📅 2017-03-29
CVSS 7.5 Dossier →
Component: binutils

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of mi...

📅 2017-03-29
CVSS 7.5 Dossier →
Component: binutils

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is v...

📅 2017-03-29
CVSS 7.5 Dossier →
Component: binutils

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that ...

📅 2017-03-29
CVSS 7.5 Dossier →
Component: binutils

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that ...

📅 2017-03-29
CVSS 7.5 Dossier →
CVE-2017-7299 MEDIUM
Component: binutils

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit r...

📅 2017-03-29
CVSS 5.5 Dossier →
Component: bash

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character an...

📅 2017-03-27
CVSS 7.8 Dossier →
Component: binutils

GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. ...

📅 2017-03-22
CVSS 7.5 Dossier →
CVE-2017-7226 CRITICAL
Component: binutils

The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-ba...

📅 2017-03-22
CVSS 9.1 Dossier →
Component: binutils

The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both emp...

📅 2017-03-22
CVSS 7.5 Dossier →
CVE-2017-7224 MEDIUM
Component: binutils

The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that...

📅 2017-03-22
CVSS 5.5 Dossier →
Component: binutils

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input str...

📅 2017-03-22
CVSS 7.5 Dossier →
CVE-2017-7210 MEDIUM
Component: binutils

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type stri...

📅 2017-03-21
CVSS 5.5 Dossier →
CVE-2017-7209 MEDIUM
Component: binutils

The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading...

📅 2017-03-21
CVSS 5.5 Dossier →
CVE-2014-9939 CRITICAL
Component: binutils

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects....

📅 2017-03-21
CVSS 9.8 Dossier →
Component: screen

GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile ...

📅 2017-03-20
CVSS 7.8 Dossier →
CVE-2015-8985 MEDIUM
Component: glibc

The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failu...

📅 2017-03-20
CVSS 5.9 Dossier →
Page 31 of 47 (1,112 Total Records)