← Back

Gnu

gnu

1,205 CVEs • 123 products

Products (123)

Click to collapse
Toggle
Binutils
binutils
Glibc
glibc
Libredwg
libredwg
Gnutls
gnutls
Grub2
grub2
Mailman
mailman
Emacs
emacs
Ncurses
ncurses
Wget
wget
Tar
tar
Bash
bash
Pspp
pspp
Patch
patch
Gcc
gcc
Recutils
recutils
Gzip
gzip
Libtasn1
libtasn1
Libextractor
libextractor
Cpio
cpio
Groff
groff
Privacy Guard
privacy_guard
Coreutils
coreutils
Libiberty
libiberty
Screen
screen
Gdb
gdb
Mailutils
mailutils
Inetutils
inetutils
Adns
adns
Gnump3d
gnump3d
Cfengine
cfengine
Radius
radius
Libmicrohttpd
libmicrohttpd
Libidn
libidn
Enscript
enscript
Sharutils
sharutils
A2ps
a2ps
Libcdio
libcdio
Osip
osip
Org Mode
org_mode
Ed
ed
Chess
chess
Aspell
aspell
Nano
nano
Libidn2
libidn2
Cflow
cflow
Fribidi
fribidi
Hurd
hurd
Savane
savane
Inet
inet
Fileutils
fileutils
Zebra
zebra
Gnats
gnats
Less
less
Gnubiff
gnubiff
Phpbook
phpbook
Gnash
gnash
Eglibc
eglibc
Fingerd
fingerd
Wget2
wget2
Sed
sed
Xemacs
xemacs
Findutils
findutils
Lsh
lsh
Cvs
cvs
Libtool
libtool
Anubis
anubis
Gettext
gettext
Texinfo
texinfo
Gv
gv
Gpgme
gpgme
M4
m4
Gnu Screen
gnu_screen
Automake
automake
Grep
grep
Grub
grub
Parallel
parallel
Guile
guile
Guix
guix
Bison
bison
Indent
indent
Make
make
Userv
userv
G++
g++
Flim
flim
Ksymoops
ksymoops
Queue
queue
Gnumail
gnumail
Libtool Ltdl
libtool-ltdl
Iceweasel
iceweasel
Flash Player
flash_player
Gimp
gimp
Tramp
tramp
Sccs
sccs
Grub Legacy
grub_legacy
Ibackup
ibackup
Classpath
classpath
Escript
escript

CVEs (1,205)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gnu
1Libextractor
May 13, 2026
Oct 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c.
1Gnu
1Glibc
May 13, 2026
Oct 18, 2017
N/A· v4
6.2 MEDIUM· v3
2.1 LOW· v2
scanf and related functions in glibc before 2.15 allow local users to cause a denial of service (segmentation fault) via a large string of 0s.
1Gnu
1Libextractor
May 13, 2026
Oct 11, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.
1Gnu
1Libextractor
May 13, 2026
Oct 11, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.
1Gnu
1Binutils
May 13, 2026
Oct 10, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted E...Show more
_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Oct 5, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash...Show more
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Oct 5, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and applicat...Show more
find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Oct 5, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a deni...Show more
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.Show less
1Gnu
1Binutils
May 13, 2026
Oct 5, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_has...Show more
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.Show less
1Gnu
1Binutils
May 13, 2026
Oct 5, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and a...Show more
bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.Show less
1Gnu
1Binutils
May 13, 2026
Oct 5, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have...Show more
dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.Show less
1Gnu
1Binutils
May 13, 2026
Oct 2, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers...Show more
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and applicat...Show more
scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (hea...Show more
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and...Show more
_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file tha...Show more
process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF fil...Show more
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.
1Gnu
1Binutils
May 13, 2026
Sep 30, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a c...Show more
Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Sep 26, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote at...Show more
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.Show less