← Back

Gnu

gnu

1,205 CVEs • 123 products

Products (123)

Click to collapse
Toggle
Binutils
binutils
Glibc
glibc
Libredwg
libredwg
Gnutls
gnutls
Grub2
grub2
Mailman
mailman
Emacs
emacs
Ncurses
ncurses
Wget
wget
Tar
tar
Bash
bash
Pspp
pspp
Patch
patch
Gcc
gcc
Recutils
recutils
Gzip
gzip
Libtasn1
libtasn1
Libextractor
libextractor
Cpio
cpio
Groff
groff
Privacy Guard
privacy_guard
Coreutils
coreutils
Libiberty
libiberty
Screen
screen
Gdb
gdb
Mailutils
mailutils
Inetutils
inetutils
Adns
adns
Gnump3d
gnump3d
Cfengine
cfengine
Radius
radius
Libmicrohttpd
libmicrohttpd
Libidn
libidn
Enscript
enscript
Sharutils
sharutils
A2ps
a2ps
Libcdio
libcdio
Osip
osip
Org Mode
org_mode
Ed
ed
Chess
chess
Aspell
aspell
Nano
nano
Libidn2
libidn2
Cflow
cflow
Fribidi
fribidi
Hurd
hurd
Savane
savane
Inet
inet
Fileutils
fileutils
Zebra
zebra
Gnats
gnats
Less
less
Gnubiff
gnubiff
Phpbook
phpbook
Gnash
gnash
Eglibc
eglibc
Fingerd
fingerd
Wget2
wget2
Sed
sed
Xemacs
xemacs
Findutils
findutils
Lsh
lsh
Cvs
cvs
Libtool
libtool
Anubis
anubis
Gettext
gettext
Texinfo
texinfo
Gv
gv
Gpgme
gpgme
M4
m4
Gnu Screen
gnu_screen
Automake
automake
Grep
grep
Grub
grub
Parallel
parallel
Guile
guile
Guix
guix
Bison
bison
Indent
indent
Make
make
Userv
userv
G++
g++
Flim
flim
Ksymoops
ksymoops
Queue
queue
Gnumail
gnumail
Libtool Ltdl
libtool-ltdl
Iceweasel
iceweasel
Flash Player
flash_player
Gimp
gimp
Tramp
tramp
Sccs
sccs
Grub Legacy
grub_legacy
Ibackup
ibackup
Classpath
classpath
Escript
escript

CVEs (1,205)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gnu
1Less
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN envir...Show more
Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossedShow less
1Gnu
1Wget
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
2.6 LOW· v2
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
1Gnu
1Sharutils
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
1Gnu
1Sharutils
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
1Gnu
1Glibc
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as t...Show more
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.Show less
1Gnu
1Glibc
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968.
1Gnu
1Enscript
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
1Gnu
1Mailman
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
1Gnu
1Mailutils
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.
1Gnu
1Queue
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code.
2Gnu
Turbolinux
4A2ps
Turbolinux HomeTurbolinux Server+1 more
Apr 16, 2026
Dec 27, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
3Conectiva
GnuUbuntu
3Linux
Realtime Linux Security ModuleUbuntu Linux
Apr 16, 2026
Dec 23, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
1Gnu
1Radius
Apr 16, 2026
Dec 23, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of servic...Show more
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.Show less
1Gnu
1Gnats
Apr 16, 2026
Dec 6, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
1Gnu
1Gzip
Apr 16, 2026
Dec 6, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different...Show more
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.Show less
1Gnu
1Radius
Apr 16, 2026
Dec 6, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.
1Gnu
1Anubis
Apr 16, 2026
Nov 23, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log....Show more
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.Show less
1Gnu
1Anubis
Apr 16, 2026
Nov 23, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.
1Gnu
1Libtool
Apr 16, 2026
Nov 23, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.
1Gnu
1Cvs
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error me...Show more
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.Show less