← Back

Gnu

gnu

1,205 CVEs • 123 products

Products (123)

Click to collapse
Toggle
Binutils
binutils
Glibc
glibc
Libredwg
libredwg
Gnutls
gnutls
Grub2
grub2
Mailman
mailman
Emacs
emacs
Ncurses
ncurses
Wget
wget
Tar
tar
Bash
bash
Pspp
pspp
Patch
patch
Gcc
gcc
Recutils
recutils
Gzip
gzip
Libtasn1
libtasn1
Libextractor
libextractor
Cpio
cpio
Groff
groff
Privacy Guard
privacy_guard
Coreutils
coreutils
Libiberty
libiberty
Screen
screen
Gdb
gdb
Mailutils
mailutils
Inetutils
inetutils
Adns
adns
Gnump3d
gnump3d
Cfengine
cfengine
Radius
radius
Libmicrohttpd
libmicrohttpd
Libidn
libidn
Enscript
enscript
Sharutils
sharutils
A2ps
a2ps
Libcdio
libcdio
Osip
osip
Org Mode
org_mode
Ed
ed
Chess
chess
Aspell
aspell
Nano
nano
Libidn2
libidn2
Cflow
cflow
Fribidi
fribidi
Hurd
hurd
Savane
savane
Inet
inet
Fileutils
fileutils
Zebra
zebra
Gnats
gnats
Less
less
Gnubiff
gnubiff
Phpbook
phpbook
Gnash
gnash
Eglibc
eglibc
Fingerd
fingerd
Wget2
wget2
Sed
sed
Xemacs
xemacs
Findutils
findutils
Lsh
lsh
Cvs
cvs
Libtool
libtool
Anubis
anubis
Gettext
gettext
Texinfo
texinfo
Gv
gv
Gpgme
gpgme
M4
m4
Gnu Screen
gnu_screen
Automake
automake
Grep
grep
Grub
grub
Parallel
parallel
Guile
guile
Guix
guix
Bison
bison
Indent
indent
Make
make
Userv
userv
G++
g++
Flim
flim
Ksymoops
ksymoops
Queue
queue
Gnumail
gnumail
Libtool Ltdl
libtool-ltdl
Iceweasel
iceweasel
Flash Player
flash_player
Gimp
gimp
Tramp
tramp
Sccs
sccs
Grub Legacy
grub_legacy
Ibackup
ibackup
Classpath
classpath
Escript
escript

CVEs (1,205)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gnu
1Binutils
May 13, 2026
Sep 25, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a...Show more
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.Show less
1Gnu
1Coreutils
May 13, 2026
Sep 20, 2017
N/A· v4
4.7 MEDIUM· v3
3.3 LOW· v2
fts.c in coreutils 8.4 allows local users to delete arbitrary files.
1Gnu
1Binutils
May 13, 2026
Sep 18, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial...Show more
The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.Show less
2Debian
Gnu
2Debian Linux
Emacs
May 13, 2026
Sep 14, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to...Show more
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe Gnus support for enriched and richtext inline MIME objects in lisp/gnus/mm-view.el. In particular, an Emacs user can be instantly compromised by reading a crafted email message (or Usenet news article).Show less
1Gnu
1Binutils
May 13, 2026
Sep 12, 2017
N/A· v4
7.8 HIGH· v3
4.3 MEDIUM· v2
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impac...Show more
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.Show less
1Gnu
1Glibc
May 13, 2026
Sep 7, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.
1Gnu
1Binutils
May 13, 2026
Sep 4, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_str...Show more
The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Sep 4, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer...Show more
The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.Show less
1Gnu
1Binutils
May 13, 2026
Sep 4, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer...Show more
The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.Show less
2Debian
Gnu
2Debian Linux
Libidn2
May 13, 2026
Aug 31, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
1Gnu
1Libidn2
May 13, 2026
Aug 31, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
1Gnu
1Binutils
May 13, 2026
Aug 29, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read...Show more
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.Show less
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack.
2Gnu
Invisible Island
2Ncurses
Ncurses
Jul 23, 2026
Aug 29, 2017
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack.
1Gnu
1Binutils
May 13, 2026
Aug 28, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted fi...Show more
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).Show less