gnu Vulnerability Advisory Catalog

Total 1,112 security vulnerabilities recorded for gnu software and firmware.

← Back to All Vendors
Component: binutils

A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker...

📅 2025-10-07
CVSS 3.3 Dossier →
Component: binutils

A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Li...

📅 2025-10-07
CVSS 3.3 Dossier →
Component: binutils

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component ...

📅 2025-09-27
CVSS 5.3 Dossier →
Component: binutils

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. E...

📅 2025-09-27
CVSS 5.3 Dossier →
Component: binutils

A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manip...

📅 2025-09-27
CVSS 3.3 Dossier →
Component: libopts

A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation le...

📅 2025-08-09
CVSS 3.3 Dossier →
Component: binutils

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/...

📅 2025-07-27
CVSS 3.3 Dossier →
Component: binutils

A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of ...

📅 2025-07-27
CVSS 3.3 Dossier →
CVE-2025-7546 MEDIUM
Component: binutils

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_co...

📅 2025-07-13
CVSS 5.3 Dossier →
CVE-2025-7545 MEDIUM
Component: binutils

A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binu...

📅 2025-07-13
CVSS 5.3 Dossier →
Component: tar

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must ex...

📅 2025-07-11
CVSS 4.1 Dossier →
Component: gnutls

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads cer...

📅 2025-07-10
CVSS 6.5 Dossier →
Component: gnutls

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extens...

📅 2025-07-10
CVSS 5.3 Dossier →
Component: gnutls

A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternativ...

📅 2025-07-10
CVSS 6.5 Dossier →
CVE-2025-5745 MEDIUM
Component: glibc

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 witho...

📅 2025-06-05
CVSS 5.6 Dossier →
CVE-2025-5702 MEDIUM
Component: glibc

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 withou...

📅 2025-06-05
CVSS 5.6 Dossier →
CVE-2025-5245 MEDIUM
Component: binutils

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/deb...

📅 2025-05-27
CVSS 5.3 Dossier →
CVE-2025-5244 MEDIUM
Component: binutils

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file b...

📅 2025-05-27
CVSS 5.3 Dossier →
Component: pspp

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the fu...

📅 2025-05-20
CVSS 3.3 Dossier →
Component: pspp

libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, lea...

📅 2025-05-16
CVSS 2.9 Dossier →
Component: glibc

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamical...

📅 2025-05-16
CVSS 7.8 Dossier →
Component: pspp

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra co...

📅 2025-05-10
CVSS 2.9 Dossier →
Component: pspp

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_rea...

📅 2025-05-10
CVSS 4.5 Dossier →
Component: pspp

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_m...

📅 2025-05-10
CVSS 4.5 Dossier →
Page 4 of 47 (1,112 Total Records)