Browse CVEs

HIGH 7.5 CVE-2019-9776 An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than C… Libredwg No fix yet Fix from $1,9502019-03-14 HIGH 7.5 CVE-2019-9192 In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by… Glibc after 2.29 Fix from $1,9502019-02-26 HIGH 7.5 CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a den… Glibc 2.28+ Fix from $1,9502019-02-26 HIGH 7.5 CVE-2018-20796EPSS 6% In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by… Glibc after 2.29 Fix from $1,9502019-02-26 MEDIUM 5.5 CVE-2019-9072 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive m… Binutils Patch available Fix from $1,6002019-02-24 MEDIUM 5.5 CVE-2019-9076 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive m… Binutils Patch available Fix from $1,6002019-02-24 MEDIUM 5.5 CVE-2019-7309 In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the… Glibc after 2.29 Fix from $1,6002019-02-03 MEDIUM 5.3 CVE-2016-10739 In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address fol… Glibc after 2.28 Fix from $1,6002019-01-21 HIGH 7.8 CVE-2019-6488 The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-b… Glibc after 2.28 Fix from $1,9502019-01-18 MEDIUM 6.5 CVE-2019-6455 An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c. Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2019-6456 An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a. Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2019-6457 An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a. Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2019-6458 An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in li… Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2019-6459 An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a. Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2019-6460 An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in libr… Recutils No fix yet Fix from $1,6002019-01-16 MEDIUM 6.5 CVE-2018-20712 A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A craft… Binutils No fix yet Fix from $1,6002019-01-15 MEDIUM 5.5 CVE-2018-20673 The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (fo… Binutils No fix yet Fix from $1,6002019-01-04 MEDIUM 5.5 CVE-2018-20671 load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buff… Binutils after 2.31.1 Fix from $1,6002019-01-04 MEDIUM 5.5 CVE-2018-20651 A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as di… Binutils No fix yet Fix from $1,6002019-01-01 MEDIUM 5.5 CVE-2018-20623 In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a… Binutils No fix yet Fix from $1,6002018-12-31 HIGH 7.8 CVE-2018-20483 set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attri… Wget 1.20.1+ Fix from $1,9502018-12-26 HIGH 7.8 CVE-2018-20230 An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which … Pspp No fix yet Fix from $1,9502018-12-19 MEDIUM 5.5 CVE-2018-19932 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer ov… Binutils after 2.31 Fix from $1,6002018-12-07 MEDIUM 5.6 CVE-2018-16868 A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An… Gnutls after 3.6.4 Fix from $1,6002018-12-03 MEDIUM 5.5 CVE-2018-18700 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting … Binutils No fix yet Fix from $1,6002018-10-29 MEDIUM 5.5 CVE-2018-18701 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting … Binutils No fix yet Fix from $1,6002018-10-29 HIGH 7.8 CVE-2018-18483 The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (ma… Binutils No fix yet Fix from $1,9502018-10-18 MEDIUM 5.5 CVE-2018-18484 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functio… Binutils No fix yet Fix from $1,6002018-10-18 MEDIUM 5.5 CVE-2018-18309 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dere… Binutils Patch available Fix from $1,6002018-10-15 MEDIUM 5.5 CVE-2018-17985 An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cp… Binutils Mitigation only Fix from $1,6002018-10-04