Gnu

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-33026 1Gnu 1Libredwg Jun 17, 2026 Jun 23, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.
CVE-2022-33025 1Gnu 1Libredwg Jun 17, 2026 Jun 23, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c.
CVE-2022-33024 1Gnu 1Libredwg Jun 17, 2026 Jun 23, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain , Dwg_Data ' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.
CVE-2021-42586 1Gnu 1Libredwg Jun 17, 2026 May 23, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVE-2021-42585 1Gnu 1Libredwg Jun 17, 2026 May 23, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVE-2022-29458 4Apple DebianGnu+1 more 4Debian Linux MacosNcurses+1 more Jul 27, 2026 Apr 18, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
CVE-2022-27943 2Fedoraproject Gnu 2Fedora Gcc Oct 14, 2026 Mar 26, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
CVE-2021-46705 1Gnu 1Grub2 Jun 17, 2026 Mar 16, 2022 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server...Show more A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.Show less
CVE-2021-3981 2Fedoraproject Gnu 2Fedora Grub2 Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality...Show more A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.Show less
CVE-2021-46195 1Gnu 1Gcc Oct 14, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory reso...Show more GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.Show less
CVE-2021-46022 2Fedoraproject Gnu 2Fedora Recutils Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-46021 2Fedoraproject Gnu 2Fedora Recutils Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-46019 2Fedoraproject Gnu 2Fedora Recutils Jun 17, 2026 Jan 14, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2022-23219 3Debian GnuOracle 8Communications Cloud Native Core Binding Support Function Communications Cloud Native Core Network Function Cloud Native EnvironmentCommunications Cloud Native Core Network Repository Function+5 more Oct 14, 2026 Jan 14, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer o...Show more The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.Show less
CVE-2022-23218 3Debian GnuOracle 4Communications Cloud Native Core Unified Data Repository Debian LinuxEnterprise Operations Monitor+1 more Oct 14, 2026 Jan 14, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer ov...Show more The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.Show less
CVE-2021-45950 1Gnu 1Libredwg Jun 17, 2026 Jan 1, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).
CVE-2021-45261 1Gnu 1Patch Jun 17, 2026 Dec 22, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
CVE-2021-45078 5Debian FedoraprojectGnu+2 more 5Binutils Debian LinuxEnterprise Linux+2 more Jun 17, 2026 Dec 15, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds wr...Show more stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.Show less
CVE-2021-28237 1Gnu 1Libredwg Jun 17, 2026 Dec 2, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
CVE-2021-28236 1Gnu 1Libredwg Jun 17, 2026 Dec 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.

Previous 1...141516...61 Next