gnu Vulnerability Advisory Catalog

Total 1,112 security vulnerabilities recorded for gnu software and firmware.

← Back to All Vendors
Component: pspp

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) vi...

📅 2025-05-03
CVSS 2.9 Dossier →
Component: mailman

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE: multiple ...

📅 2025-04-20
CVSS 5.3 Dossier →
Component: mailman

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary...

📅 2025-04-20
CVSS 5.4 Dossier →
Component: mailman

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/p...

📅 2025-04-20
CVSS 5.8 Dossier →
Component: binutils

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of...

📅 2025-04-04
CVSS 3.3 Dossier →
CVE-2025-0686 MEDIUM
Component: grub2

A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters fr...

📅 2025-03-03
CVSS 6.4 Dossier →
CVE-2025-0685 MEDIUM
Component: grub2

A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem g...

📅 2025-03-03
CVSS 6.4 Dossier →
CVE-2025-0684 MEDIUM
Component: grub2

A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from...

📅 2025-03-03
CVSS 6.4 Dossier →
Component: grub2

A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem g...

📅 2025-03-03
CVSS 7.8 Dossier →
Component: grub2

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the ...

📅 2025-03-03
CVSS 7.8 Dossier →
Component: grub2

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash....

📅 2025-03-03
CVSS 4.1 Dossier →
Component: grub2

When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the in...

📅 2025-03-03
CVSS 7.8 Dossier →
Component: grub2

When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. In c...

📅 2025-03-03
CVSS 7.8 Dossier →
Component: grub2

A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allo...

📅 2025-03-03
CVSS 6.7 Dossier →
Component: grub2

An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to validate th...

📅 2025-03-03
CVSS 6.0 Dossier →
Component: grub2

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_getstr_from_position() may overf...

📅 2025-02-19
CVSS 6.7 Dossier →
CVE-2025-1182 MEDIUM
Component: binutils

A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file...

📅 2025-02-11
CVSS 5.0 Dossier →
CVE-2025-1181 MEDIUM
Component: binutils

A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/e...

📅 2025-02-11
CVSS 5.0 Dossier →
Component: binutils

A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file b...

📅 2025-02-11
CVSS 3.1 Dossier →
CVE-2025-1179 MEDIUM
Component: binutils

A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbf...

📅 2025-02-11
CVSS 5.0 Dossier →
CVE-2025-1178 MEDIUM
Component: binutils

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the ...

📅 2025-02-11
CVSS 5.6 Dossier →
CVE-2025-1176 MEDIUM
Component: binutils

A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c...

📅 2025-02-11
CVSS 5.0 Dossier →
Component: binutils

A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the fi...

📅 2025-02-10
CVSS 3.1 Dossier →
Component: binutils

A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component...

📅 2025-02-10
CVSS 3.1 Dossier →
Page 5 of 47 (1,112 Total Records)