Vulnerability index

Browse CVEs

725 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libredwg HIGH 7.5
CVE-2019-9776

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than C…

No fix yet
Fix from $1,950 2019-03-14
Glibc HIGH 7.5
CVE-2019-9192

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by…

Fix: after 2.29
Fix from $1,950 2019-02-26
Glibc HIGH 7.5
CVE-2009-5155

In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a den…

Fix: 2.28+
Fix from $1,950 2019-02-26
Glibc HIGH 7.5
CVE-2018-20796EPSS 6%

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by…

Fix: after 2.29
Fix from $1,950 2019-02-26
Binutils MEDIUM 5.5
CVE-2019-9072

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive m…

Patch available
Fix from $1,600 2019-02-24
Binutils MEDIUM 5.5
CVE-2019-9076

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive m…

Patch available
Fix from $1,600 2019-02-24
Glibc MEDIUM 5.5
CVE-2019-7309

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the…

Fix: after 2.29
Fix from $1,600 2019-02-03
Glibc MEDIUM 5.3
CVE-2016-10739

In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address fol…

Fix: after 2.28
Fix from $1,600 2019-01-21
Glibc HIGH 7.8
CVE-2019-6488

The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-b…

Fix: after 2.28
Fix from $1,950 2019-01-18
Recutils MEDIUM 6.5
CVE-2019-6455

An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c.

No fix yet
Fix from $1,600 2019-01-16
Recutils MEDIUM 6.5
CVE-2019-6456

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a.

No fix yet
Fix from $1,600 2019-01-16
Recutils MEDIUM 6.5
CVE-2019-6457

An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a.

No fix yet
Fix from $1,600 2019-01-16
Recutils MEDIUM 6.5
CVE-2019-6458

An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in li…

No fix yet
Fix from $1,600 2019-01-16
Recutils MEDIUM 6.5
CVE-2019-6459

An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a.

No fix yet
Fix from $1,600 2019-01-16
Recutils MEDIUM 6.5
CVE-2019-6460

An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in libr…

No fix yet
Fix from $1,600 2019-01-16
Binutils MEDIUM 6.5
CVE-2018-20712

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A craft…

No fix yet
Fix from $1,600 2019-01-15
Binutils MEDIUM 5.5
CVE-2018-20673

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (fo…

No fix yet
Fix from $1,600 2019-01-04
Binutils MEDIUM 5.5
CVE-2018-20671

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buff…

Fix: after 2.31.1
Fix from $1,600 2019-01-04
Binutils MEDIUM 5.5
CVE-2018-20651

A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as di…

No fix yet
Fix from $1,600 2019-01-01
Binutils MEDIUM 5.5
CVE-2018-20623

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a…

No fix yet
Fix from $1,600 2018-12-31
Wget HIGH 7.8
CVE-2018-20483

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attri…

Fix: 1.20.1+
Fix from $1,950 2018-12-26
Pspp HIGH 7.8
CVE-2018-20230

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which …

No fix yet
Fix from $1,950 2018-12-19
Binutils MEDIUM 5.5
CVE-2018-19932

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer ov…

Fix: after 2.31
Fix from $1,600 2018-12-07
Gnutls MEDIUM 5.6
CVE-2018-16868

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An…

Fix: after 3.6.4
Fix from $1,600 2018-12-03
Binutils MEDIUM 5.5
CVE-2018-18700

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting …

No fix yet
Fix from $1,600 2018-10-29
Binutils MEDIUM 5.5
CVE-2018-18701

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting …

No fix yet
Fix from $1,600 2018-10-29
Binutils HIGH 7.8
CVE-2018-18483

The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (ma…

No fix yet
Fix from $1,950 2018-10-18
Binutils MEDIUM 5.5
CVE-2018-18484

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functio…

No fix yet
Fix from $1,600 2018-10-18
Binutils MEDIUM 5.5
CVE-2018-18309

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dere…

Patch available
Fix from $1,600 2018-10-15
Binutils MEDIUM 5.5
CVE-2018-17985

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cp…

Mitigation only
Fix from $1,600 2018-10-04