Gnu

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-7227 1Gnu 1Binutils May 13, 2026 Mar 22, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.
CVE-2017-7226 1Gnu 1Binutils May 13, 2026 Mar 22, 2017 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function...Show more The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.Show less
CVE-2017-7225 1Gnu 1Binutils May 13, 2026 Mar 22, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and le...Show more The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.Show less
CVE-2017-7224 1Gnu 1Binutils May 13, 2026 Mar 22, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.
CVE-2017-7223 1Gnu 1Binutils May 13, 2026 Mar 22, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.
CVE-2017-7210 1Gnu 1Binutils May 13, 2026 Mar 21, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.
CVE-2017-7209 1Gnu 1Binutils May 13, 2026 Mar 21, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.
CVE-2014-9939 1Gnu 1Binutils May 13, 2026 Mar 21, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
CVE-2017-5618 1Gnu 1Screen May 13, 2026 Mar 20, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
CVE-2015-8985 1Gnu 1Glibc May 13, 2026 Mar 20, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expr...Show more The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing.Show less
CVE-2015-8984 1Gnu 1Glibc May 13, 2026 Mar 20, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash) via a malformed pattern, which triggers an out-of-bounds...Show more The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash) via a malformed pattern, which triggers an out-of-bounds read.Show less
CVE-2015-8983 1Gnu 1Glibc May 13, 2026 Mar 20, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly...Show more Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow.Show less
CVE-2017-6969 1Gnu 1Binutils May 13, 2026 Mar 17, 2017 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
CVE-2017-6966 1Gnu 1Binutils May 13, 2026 Mar 17, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mish...Show more readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.Show less
CVE-2017-6965 1Gnu 1Binutils May 13, 2026 Mar 17, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.
CVE-2015-8982 1Gnu 1Glibc May 13, 2026 Mar 15, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string,...Show more Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.Show less
CVE-2017-6508 1Gnu 1Wget May 13, 2026 Mar 7, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
CVE-2016-10228 1Gnu 1Glibc Oct 14, 2026 Mar 2, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when p...Show more The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.Show less
CVE-2016-4493 1Gnu 1Libiberty May 13, 2026 Feb 24, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
CVE-2016-4492 1Gnu 1Libiberty May 13, 2026 Feb 24, 2017 N/A· v4 4.4 MEDIUM· v3 4.3 MEDIUM· v2 Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.

Previous 1...394041...61 Next