Browse CVEs

MEDIUM 6.5 CVE-2019-6460 An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in libr… Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2018-20712 A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A craft… Binutils No fix yet Fix from $1,6002019-01-15 MEDIUM 5.5 CVE-2018-20673 The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (fo… Binutils No fix yet Fix from $1,6002019-01-04 MEDIUM 5.5 CVE-2018-20651 A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as di… Binutils No fix yet Fix from $1,6002019-01-01 MEDIUM 5.5 CVE-2018-20623 In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a… Binutils No fix yet Fix from $1,6002018-12-31 HIGH 7.8 CVE-2018-20230 An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which … Pspp No fix yet Fix from $1,9502018-12-19 MEDIUM 5.5 CVE-2018-18700 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting … Binutils No fix yet Fix from $1,6002018-10-29 MEDIUM 5.5 CVE-2018-18701 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting … Binutils No fix yet Fix from $1,6002018-10-29 HIGH 7.8 CVE-2018-18483 The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (ma… Binutils No fix yet Fix from $1,9502018-10-18 MEDIUM 5.5 CVE-2018-18484 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functio… Binutils No fix yet Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-17985 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cp… Binutils Mitigation only Fix from $1,6002018-10-04 MEDIUM 6.5 CVE-2018-17794 An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_… Binutils Mitigation only Fix from $1,6002018-09-30 MEDIUM 5.5 CVE-2018-17358 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exist… Binutils No fix yet Fix from $1,6002018-09-23 MEDIUM 5.5 CVE-2018-17359 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exist… Binutils No fix yet Fix from $1,6002018-09-23 MEDIUM 5.5 CVE-2018-1000654 GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser ag… Libtasn1 No fix yet Fix from $1,6002018-08-20 HIGH 7.5 CVE-2018-12934 remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OO… Binutils No fix yet Fix from $1,9502018-06-28 MEDIUM 5.5 CVE-2018-12641 An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling… Binutils No fix yet Fix from $1,6002018-06-22 MEDIUM 5.5 CVE-2018-9996 An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions… Binutils No fix yet Fix from $1,6002018-04-10 MEDIUM 5.5 CVE-2018-9138 An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling … Binutils Mitigation only Fix from $1,6002018-03-30 MEDIUM 5.5 CVE-2018-6759 The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has… Binutils Mitigation only Fix from $1,6002018-02-06 HIGH 7.8 CVE-2018-6543 In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size… Binutils No fix yet Fix from $1,9502018-02-02 HIGH 7.8 CVE-2017-1000408 A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that… Glibc No fix yet Fix from $1,9502018-02-01 HIGH 7.0 CVE-2017-1000409 A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note th… Glibc No fix yet Fix from $1,9502018-02-01 HIGH 7.8 CVE-2018-6323EPSS 6% The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsign… Binutils No fix yet Fix from $1,9502018-01-26 HIGH 8.8 CVE-2017-17531 gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow… Global Mitigation only Fix from $1,9502017-12-14 HIGH 8.1 CVE-2017-17426 The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an… Glibc No fix yet Fix from $1,9502017-12-05 HIGH 7.8 CVE-2017-17121 The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (m… Binutils No fix yet Fix from $1,9502017-12-04 HIGH 7.8 CVE-2017-17124 The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1… Binutils No fix yet Fix from $1,9502017-12-04 MEDIUM 5.5 CVE-2017-17123 The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, al… Binutils No fix yet Fix from $1,6002017-12-04 MEDIUM 5.5 CVE-2017-17080 elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which a… Binutils Mitigation only Fix from $1,6002017-11-30