GNU : Security Vulnerabilities (CVSS score between 5 and 5.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2013-1914	119		DoS Overflow	2013-04-29	2013-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
2	CVE-2013-0242	119		DoS Overflow Mem. Corr.	2013-02-08	2013-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
Buffer overflow in the extend_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allows context-dependent attackers to cause a denial of service (memory corruption and crash) via crafted multibyte characters.
3	CVE-2012-3509	189		DoS Overflow	2012-09-05	2012-09-06	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.
4	CVE-2012-1573	310		DoS Mem. Corr.	2012-03-26	2013-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
5	CVE-2012-1569	189		DoS Mem. Corr.	2012-03-26	2013-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
6	CVE-2011-4609	399		DoS	2013-05-02	2013-05-03	5.0	None	Remote	Low	Not required	None	None	Partial
The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
7	CVE-2011-4328	264		+Info	2012-06-15	2012-06-20	5.0	None	Remote	Low	Not required	Partial	None	None
plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (word readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information.
8	CVE-2011-3771	200		+Info	2011-09-23	2011-10-20	5.0	None	Remote	Low	Not required	Partial	None	None
phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/update_smilies_1.50-1.60.php and certain other files.
9	CVE-2011-2896	119		Exec Code Overflow	2011-08-19	2013-05-14	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img/gifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.
10	CVE-2011-1659	189		DoS Overflow	2011-04-08	2012-01-18	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.
11	CVE-2011-1071	399		DoS Exec Code	2011-04-08	2012-01-26	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka a "stack extension attack," a related issue to CVE-2010-2898, CVE-2010-1917, and CVE-2007-4782, as originally reported for use of this library by Google Chrome.
12	CVE-2010-4651	22		Dir. Trav.	2011-03-11	2011-07-01	5.8	None	Remote	Medium	Not required	None	Partial	Partial
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
13	CVE-2010-4052	399	1	DoS	2011-01-13	2011-07-19	5.0	None	Remote	Low	Not required	None	None	Partial
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.
14	CVE-2010-4051		1	DoS Overflow Bypass	2011-01-13	2011-02-02	5.0	None	Remote	Low	Not required	None	None	Partial
The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the intended RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD, related to a "RE_DUP_MAX overflow."
15	CVE-2010-3192	200		Overflow +Info	2010-10-14	2010-10-14	5.0	None	Remote	Low	Not required	Partial	None	None
Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program that contains a stack-based buffer overflow error, related to the __fortify_fail function in debug/fortify_fail.c, and the __stack_chk_fail (aka stack protection) and __chk_fail (aka FORTIFY_SOURCE) implementations.
16	CVE-2010-0830	189		Exec Code	2010-06-01	2011-01-12	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
17	CVE-2009-4881	189		DoS Overflow	2010-06-01	2011-01-12	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted format string, as demonstrated by the %99999999999999999999n string, a related issue to CVE-2008-1391.
18	CVE-2009-4880	189		DoS Overflow	2010-06-01	2011-01-12	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of service (memory consumption or application crash) via a crafted format string, as demonstrated by a crafted first argument to the money_format function in PHP, a related issue to CVE-2008-1391.
19	CVE-2009-3555	310			2009-11-09	2012-10-22	5.8	None	Remote	Medium	Not required	None	Partial	Partial
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
20	CVE-2009-2409	310			2009-07-30	2012-10-22	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.
21	CVE-2009-1417	310			2009-04-30	2009-06-10	5.0	None	Remote	Low	Not required	None	Partial	None
gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup.
22	CVE-2008-1950	189		DoS	2008-05-21	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.
23	CVE-2007-6613	119		DoS Exec Code Overflow	2008-01-03	2008-10-11	5.0	None	Remote	Low	Not required	None	None	Partial
Stack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (libcdio) 0.79 and earlier allows context-dependent attackers to cause a denial of service (core dump) and possibly execute arbitrary code via a disk or image that contains a long joilet file name.
24	CVE-2007-6130	287		Bypass	2007-11-26	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions.
25	CVE-2007-1269				2007-03-06	2008-11-15	5.0	None	Remote	Low	Not required	None	Partial	None
GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
26	CVE-2007-1263				2007-03-06	2010-08-21	5.0	None	Remote	Low	Not required	None	Partial	None
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.
27	CVE-2006-7239	310		DoS	2010-05-24	2010-05-25	5.0	None	Remote	Low	Not required	None	None	Partial
The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.
28	CVE-2006-6719			DoS	2006-12-23	2010-09-15	5.0	None	Remote	Low	Not required	None	None	Partial
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command.
29	CVE-2006-5864			Exec Code Overflow	2006-11-10	2010-09-15	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.
30	CVE-2006-4790				2006-09-14	2010-09-15	5.0	None	Remote	Low	Not required	None	Partial	None
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
31	CVE-2006-4146	119		Exec Code Overflow	2006-08-31	2010-08-21	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
32	CVE-2006-2941			DoS	2006-09-05	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
33	CVE-2006-0300			DoS Exec Code Overflow	2006-02-23	2010-08-21	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute code via unspecified vectors involving PAX extended headers.
34	CVE-2006-0052			DoS	2006-03-31	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allows remote attackers to cause a denial of service (mailing list delivery failure) via a multipart MIME message with a single part that has two blank lines between the first boundary and the end boundary.
35	CVE-2006-0049				2006-03-13	2010-08-21	5.0	None	Remote	Low	Not required	None	Partial	None
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.
36	CVE-2005-3573			DoS	2005-11-16	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
37	CVE-2005-3123			Dir. Trav.	2005-10-30	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.
38	CVE-2005-1849			DoS	2005-07-26	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
39	CVE-2005-1522			DoS	2005-05-26	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETCH command.
40	CVE-2005-1431			DoS	2005-05-03	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding bytes in gnutils_cipher.c.
41	CVE-2005-1228			Dir. Trav.	2005-05-02	2010-08-21	5.0	None	Remote	Low	Not required	None	Partial	None
Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename within a compressed file.
42	CVE-2005-0202			Dir. Trav.	2005-05-02	2010-08-21	5.0	None	Remote	Low	Not required	Partial	None	None
Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via ".../....///" sequences, which are not properly cleansed by regular expressions that are intended to remove "../" and "./" sequences.
43	CVE-2005-0080				2005-05-02	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.
44	CVE-2004-2460			DoS	2004-12-31	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
45	CVE-2004-1702			DoS	2004-08-09	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash).
46	CVE-2004-1488			Exec Code	2005-04-27	2010-08-21	5.0	None	Remote	Low	Not required	None	Partial	None
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
47	CVE-2004-1487			Bypass	2005-04-27	2010-08-21	5.0	None	Remote	Low	Not required	None	Partial	None
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
48	CVE-2004-1186			DoS Overflow	2004-12-31	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).
49	CVE-2004-0849			DoS Overflow	2004-12-23	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.
50	CVE-2004-0576			DoS	2004-12-06	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.

Total number of vulnerabilities : 70 Page : 1 (This Page)2