WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor gnu✕
Overview 1,196 matches · 0 in Waratek scope · 0 protected · 14 exploited · 5 CISA KEV · 99 public PoC · 18 EPSS ≥ 0.5
1,196matches 0in Waratek scope0.0% 0protected0.0% 14exploited1.2% 5CISA KEV0.4% 99public PoC8.3% 18EPSS ≥ 0.51.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 45 3.8% Not applicable 1,151 96.2% Withdrawn CVE 0 0.0%
Critical 72 6.0% High 490 41.0% Medium 515 43.1% Low 119 9.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 1,196 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 14 1.2% Working exploit published 81 6.8% Proof of concept only 134 11.2% Forecast only 2 0.2% No public exploit 965 80.7%
split by peak 186 / year
Not applicable: 1,151Outside Waratek scope: 45 Low: 119Medium: 515High: 490Critical: 72 not blocked: 1,196 No public exploit: 965Forecast only: 2Proof of concept only: 134Working exploit published: 81Exploited: 14
19961 Not applicable1 Medium1 not blocked1 No public exploit1 19977 Not applicable7 High3 Medium3 Low1 not blocked7 Working exploit published2 Forecast only1 No public exploit4 19980 19994 Not applicable4 High1 Medium3 not blocked4 Working exploit published1 No public exploit3 200014 Not applicable14 High7 Medium4 Low3 not blocked14 Working exploit published1 No public exploit13 200112 Not applicable12 High5 Medium4 Low3 not blocked12 Working exploit published3 No public exploit9 200218 Not applicable18 High8 Medium7 Low3 not blocked18 Working exploit published3 No public exploit15 200314 Not applicable14 High5 Medium6 Low3 not blocked14 Working exploit published7 No public exploit7 200437 Not applicable37 High14 Medium15 Low8 not blocked37 Working exploit published5 No public exploit32 200546 Not applicable46 High13 Medium19 Low14 not blocked46 Working exploit published7 No public exploit39 200622 Not applicable22 High5 Medium12 Low5 not blocked22 Working exploit published7 No public exploit15 200717 Not applicable17 High6 Medium11 not blocked17 Working exploit published4 No public exploit13 200820 Not applicable20 High10 Medium9 Low1 not blocked20 Working exploit published2 No public exploit18 200913 Not applicable13 Critical1 High3 Medium8 Low1 not blocked13 Exploited1 Working exploit published2 No public exploit10 201018 Not applicable18 High3 Medium10 Low5 not blocked18 Working exploit published2 No public exploit16 201125 Not applicable25 High2 Medium15 Low8 not blocked25 Exploited1 Working exploit published6 No public exploit18 201212 Not applicable12 High2 Medium10 not blocked12 Working exploit published2 No public exploit10 201320 Not applicable20 High1 Medium18 Low1 not blocked20 Working exploit published4 No public exploit16 201445 Not applicable45 Critical2 High14 Medium21 Low8 not blocked45 Exploited6 Working exploit published2 Proof of concept only1 No public exploit36 201528 Outside Waratek scope1 Not applicable27 High11 Medium13 Low4 not blocked28 Working exploit published1 Proof of concept only1 No public exploit26 201623 Not applicable23 Critical4 High15 Medium4 not blocked23 Exploited1 Working exploit published2 Proof of concept only1 No public exploit19 2017186 Outside Waratek scope1 Not applicable185 Critical15 High105 Medium66 not blocked186 Working exploit published10 Proof of concept only3 No public exploit173 201884 Outside Waratek scope3 Not applicable81 Critical8 High27 Medium49 not blocked84 Exploited1 Working exploit published4 Proof of concept only3 No public exploit76 201991 Outside Waratek scope12 Not applicable79 Critical9 High41 Medium40 Low1 not blocked91 Working exploit published1 Proof of concept only3 Forecast only1 No public exploit86 202059 Outside Waratek scope7 Not applicable52 Critical8 High25 Medium25 Low1 not blocked59 Exploited1 No public exploit58 202185 Outside Waratek scope12 Not applicable73 Critical7 High47 Medium29 Low2 not blocked85 Proof of concept only2 No public exploit83 202245 Outside Waratek scope2 Not applicable43 Critical4 High25 Medium15 Low1 not blocked45 Proof of concept only3 No public exploit42 202371 Outside Waratek scope2 Not applicable69 Critical3 High35 Medium33 not blocked71 Exploited1 Working exploit published1 Proof of concept only35 No public exploit34 202435 Outside Waratek scope3 Not applicable32 Critical2 High17 Medium13 Low3 not blocked35 Exploited1 Working exploit published1 Proof of concept only9 No public exploit24 202569 Outside Waratek scope2 Not applicable67 Critical3 High18 Medium20 Low28 not blocked69 Proof of concept only45 No public exploit24 202675 Not applicable75 Critical6 High22 Medium32 Low15 not blocked75 Exploited1 Working exploit published1 Proof of concept only28 No public exploit45
19961999200220052008201120142017202020232026
1,196 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 12 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2022-47011 Medium 2023-08-22 Not applicable Proof of concept only An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47010 Medium 2023-08-22 Not applicable No public exploit An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47008 Medium 2023-08-22 Not applicable Proof of concept only An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47007 Medium 2023-08-22 Not applicable Proof of concept only An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-45703 High 2023-08-22 Not applicable Proof of concept only Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
CVE-2022-44840 High 2023-08-22 Not applicable Proof of concept only Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
CVE-2022-35206 Medium 2023-08-22 Not applicable Proof of concept only Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.
CVE-2022-35205 Medium 2023-08-22 Not applicable No public exploit An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.
CVE-2021-46174 High 2023-08-22 Not applicable Proof of concept only Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
CVE-2020-35357 Medium 2023-08-22 Not applicable No public exploit A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.
CVE-2020-35342 High 2023-08-22 Not applicable Proof of concept only GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
CVE-2020-21490 Medium 2023-08-22 Not applicable No public exploit An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.
CVE-2020-19726 High 2023-08-22 Not applicable Proof of concept only An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.
CVE-2020-19724 Medium 2023-08-22 Not applicable Proof of concept only A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
CVE-2023-40305 Medium 2023-08-14 Not applicable Proof of concept only GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
CVE-2023-40303 High 2023-08-14 Not applicable No public exploit GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process.
CVE-2023-39130 Medium 2023-07-25 Not applicable Proof of concept only GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.
CVE-2023-39129 Medium 2023-07-25 Not applicable Proof of concept only GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.
CVE-2023-39128 Medium 2023-07-25 Not applicable Proof of concept only GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.
CVE-2022-28736 High 2023-07-20 Not applicable No public exploit There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-after-free vulnerability is triggered. If an attacker can control the GRUB2's memory allocation pattern sensitive data may be exposed and arbitrary code execution can be achieved.
CVE-2022-28735 High 2023-07-20 Not applicable No public exploit The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.
CVE-2022-28734 High 2023-07-20 Outside Waratek scope No public exploit Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.
CVE-2022-28733 High 2023-07-20 Not applicable No public exploit Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.
CVE-2021-32256 Medium 2023-07-18 Not applicable Proof of concept only An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.
CVE-2015-20109 Medium 2023-06-25 Not applicable Proof of concept only end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash), as demonstrated by use of the fnmatch library function with the **(!() pattern. NOTE: this is not the same as CVE-2015-8984; also, some Linux distributions have fixed CVE-2015-8984 but have not fixed this additional fnmatch issue.
CVE-2023-36274 High 2023-06-23 Not applicable No public exploit LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.
CVE-2023-36273 High 2023-06-23 Not applicable Proof of concept only LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.
CVE-2023-36272 High 2023-06-23 Not applicable Proof of concept only LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.
CVE-2023-36271 High 2023-06-23 Not applicable Proof of concept only LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.
CVE-2023-2789 High 2023-05-18 Not applicable No public exploit A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-2491 High 2023-05-17 Not applicable No public exploit A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
CVE-2023-1972 Medium 2023-05-17 Not applicable No public exploit A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.
CVE-2021-34337 Medium 2023-04-15 Not applicable No public exploit An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrary REST API calls. The REST API is bound to localhost by default, limiting the ability for attackers to exploit this, but can optionally be made to listen on other interfaces.
CVE-2023-24626 Medium 2023-04-08 Not applicable Working exploit published socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.
CVE-2023-1579 High 2023-04-03 Not applicable No public exploit Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.
CVE-2023-28617 High 2023-03-19 Not applicable No public exploit org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.
CVE-2023-27986 High 2023-03-09 Not applicable Proof of concept only emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90.
CVE-2023-27985 High 2023-03-09 Not applicable No public exploit emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90
CVE-2023-25222 High 2023-03-01 Not applicable Proof of concept only A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.
CVE-2023-27371 Medium 2023-02-28 Not applicable No public exploit GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.
CVE-2022-48339 High 2023-02-20 Not applicable No public exploit An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.
CVE-2022-48338 High 2023-02-20 Not applicable No public exploit An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may cause commands to be executed.
CVE-2022-48337 Critical 2023-02-20 Not applicable No public exploit GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u *" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input.
CVE-2023-0361 High 2023-02-15 Not applicable Proof of concept only A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
CVE-2022-46663 High 2023-02-07 Not applicable No public exploit In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
CVE-2023-0687 Critical 2023-02-06 Not applicable No public exploit A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.
CVE-2023-25139 Critical 2023-02-03 Not applicable No public exploit sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes.
CVE-2022-48303 Medium 2023-01-30 Not applicable Proof of concept only GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.
CVE-2022-4285 Medium 2023-01-27 Not applicable No public exploit An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.
CVE-2022-3715 High 2023-01-05 Not applicable Proof of concept only A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
CVE-2022-3775 High 2022-12-19 Not applicable No public exploit When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption and availability issues. Although complex, arbitrary code execution could not be discarded.
CVE-2022-2601 High 2022-12-14 Not applicable No public exploit A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
CVE-2022-45332 High 2022-11-30 Not applicable Proof of concept only LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.
CVE-2022-45939 High 2022-11-28 Not applicable No public exploit GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.
CVE-2021-46848 Critical 2022-10-24 Not applicable No public exploit GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
CVE-2022-41550 Medium 2022-10-11 Not applicable No public exploit GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header.
CVE-2022-25310 Medium 2022-09-06 Not applicable No public exploit A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
CVE-2022-25309 Medium 2022-09-06 Not applicable No public exploit A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.
CVE-2022-25308 High 2022-09-06 Not applicable No public exploit A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
CVE-2022-39832 High 2022-09-05 Not applicable No public exploit An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2022-39831 High 2022-09-05 Not applicable No public exploit An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact. This issue is different from CVE-2018-20230.
CVE-2021-3826 Medium 2022-09-01 Not applicable No public exploit Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
CVE-2022-39046 High 2022-08-31 Not applicable No public exploit An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.
CVE-2022-1271 High 2022-08-31 Not applicable No public exploit An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
CVE-2022-39028 High 2022-08-30 Not applicable No public exploit telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.
CVE-2022-38533 Medium 2022-08-26 Not applicable No public exploit In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.
CVE-2021-4209 Medium 2022-08-24 Not applicable No public exploit A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
CVE-2021-3999 High 2022-08-24 Not applicable No public exploit A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
CVE-2021-3998 High 2022-08-24 Not applicable No public exploit A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
CVE-2022-35164 Critical 2022-08-18 Not applicable No public exploit LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.
CVE-2022-2509 High 2022-08-01 Not applicable No public exploit A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
CVE-2022-2469 High 2022-07-19 Not applicable No public exploit GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client
CVE-2021-3697 High 2022-07-06 Not applicable No public exploit A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerability can lead to data corruption and eventual code execution or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
CVE-2021-3696 Medium 2022-07-06 Not applicable No public exploit A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of corrupted Huffman entries to achieve results such as arbitrary code execution and/or secure boot circumvention. This flaw affects grub2 versions prior grub-2.12.
CVE-2021-3695 Medium 2022-07-06 Not applicable No public exploit A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an attacker needs to perform some triage over the heap layout to achieve signifcant results, also the values written into the memory are repeated three times in a row making difficult to produce valid payloads. This flaw affects grub2 versions prior grub-2.12.
CVE-2022-33034 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.
CVE-2022-33033 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.
CVE-2022-33032 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.
CVE-2022-33028 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.
CVE-2022-33027 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c.
CVE-2022-33026 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.
CVE-2022-33025 High 2022-06-23 Not applicable No public exploit LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c.
CVE-2022-33024 High 2022-06-23 Not applicable No public exploit There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.
CVE-2021-42586 High 2022-05-23 Not applicable No public exploit A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVE-2021-42585 High 2022-05-23 Not applicable No public exploit A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVE-2022-27943 Medium 2022-03-26 Not applicable No public exploit libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
CVE-2021-46705 Medium 2022-03-16 Not applicable No public exploit A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.
CVE-2021-3981 Low 2022-03-10 Not applicable No public exploit A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.
CVE-2022-23219 Critical 2022-01-14 Outside Waratek scope Proof of concept only The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
CVE-2022-23218 Critical 2022-01-14 Outside Waratek scope Proof of concept only The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
CVE-2021-46195 Medium 2022-01-14 Not applicable No public exploit GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.
CVE-2021-46022 Medium 2022-01-14 Not applicable No public exploit An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-46021 Medium 2022-01-14 Not applicable No public exploit An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-46019 Medium 2022-01-14 Not applicable No public exploit An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
CVE-2021-45950 Medium 2022-01-01 Not applicable No public exploit LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).
CVE-2021-45261 Medium 2021-12-22 Not applicable No public exploit An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
CVE-2021-45078 High 2021-12-15 Not applicable No public exploit stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.
CVE-2021-44227 High 2021-12-02 Not applicable No public exploit In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
CVE-2021-28237 Critical 2021-12-02 Not applicable No public exploit LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
CVE-2021-28236 High 2021-12-02 Not applicable No public exploit LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
‹ prev page 3 of 12 next ›