GNU : Security Vulnerabilities

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-1000654	399		2018-08-20	2018-10-30	7.1	None	Remote	Medium	Not required	None	None	Complete
GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.
2	CVE-2018-1000156	20	Exec Code	2018-04-06	2018-06-28	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
3	CVE-2018-1000097	119	Exec Code Overflow	2018-03-12	2018-04-13	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..
4	CVE-2018-1000001	119	Exec Code Overflow	2018-01-31	2018-06-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
5	CVE-2018-18751	415		2018-10-29	2018-12-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
6	CVE-2018-18701	400		2018-10-29	2018-12-10	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
7	CVE-2018-18700	400		2018-10-29	2018-12-10	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
8	CVE-2018-18607	476	DoS	2018-10-23	2018-12-06	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
9	CVE-2018-18606	476	DoS	2018-10-23	2018-12-06	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
10	CVE-2018-18605	119	DoS Overflow	2018-10-23	2018-12-06	4.3	None	Remote	Medium	Not required	None	None	Partial
A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
11	CVE-2018-17985	400		2018-10-04	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.
12	CVE-2018-17794	476		2018-09-30	2018-11-28	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
13	CVE-2018-17360	119	DoS Overflow	2018-09-23	2018-11-09	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfd_getl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executable objdump.
14	CVE-2018-17359	119	DoS Overflow	2018-09-23	2018-11-09	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_zalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.
15	CVE-2018-17358	119	DoS Overflow	2018-09-23	2018-11-09	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.
16	CVE-2018-16430	125		2018-09-03	2018-10-25	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c.
17	CVE-2018-13796	20		2018-07-12	2018-09-10	4.3	None	Remote	Medium	Not required	None	Partial	None
An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
18	CVE-2018-13033	399	DoS	2018-07-01	2018-10-31	4.3	None	Remote	Medium	Not required	None	None	Partial
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.
19	CVE-2018-12934	399		2018-06-28	2018-08-20	5.0	None	Remote	Low	Not required	None	None	Partial
remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.
20	CVE-2018-12700	399		2018-06-23	2018-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
A Stack Exhaustion issue was discovered in debug_write_type in debug.c in GNU Binutils 2.30 because of DEBUG_KIND_INDIRECT infinite recursion.
21	CVE-2018-12699	787	DoS Overflow	2018-06-23	2018-08-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.
22	CVE-2018-12698	399		2018-06-23	2018-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
23	CVE-2018-12697	476		2018-06-23	2018-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.
24	CVE-2018-12641	399		2018-06-22	2018-08-21	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
25	CVE-2018-11237	119	Overflow	2018-05-18	2018-10-31	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
26	CVE-2018-11236	190	Exec Code Overflow	2018-05-18	2018-10-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
27	CVE-2018-10846	310		2018-08-22	2018-11-07	1.9	None	Local	Medium	Not required	Partial	None	None
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.
28	CVE-2018-10845	310		2018-08-22	2018-11-07	4.3	None	Remote	Medium	Not required	Partial	None	None
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.
29	CVE-2018-10844	310		2018-08-22	2018-11-07	4.3	None	Remote	Medium	Not required	Partial	None	None
It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.
30	CVE-2018-10535	476	DoS	2018-04-29	2018-10-31	4.3	None	Remote	Medium	Not required	None	None	Partial
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
31	CVE-2018-10534	787		2018-04-29	2018-10-31	4.3	None	Remote	Medium	Not required	None	None	Partial
The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c.
32	CVE-2018-10373	476	DoS	2018-04-25	2018-10-31	4.3	None	Remote	Medium	Not required	None	None	Partial
concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.
33	CVE-2018-10372	119	DoS Overflow	2018-04-25	2018-10-31	4.3	None	Remote	Medium	Not required	None	None	Partial
process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.
34	CVE-2018-9996	399		2018-04-10	2018-05-17	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.
35	CVE-2018-9138	399		2018-03-30	2018-05-21	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.
36	CVE-2018-8945	20	DoS	2018-03-22	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.
37	CVE-2018-7643	190	DoS Overflow	2018-03-02	2018-11-27	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.
38	CVE-2018-7642	476	DoS	2018-03-02	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy.
39	CVE-2018-7570	476	DoS	2018-02-28	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.
40	CVE-2018-7569	190	DoS Overflow	2018-02-28	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.
41	CVE-2018-7568	190	DoS Overflow	2018-02-28	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.
42	CVE-2018-7208	20	DoS	2018-02-17	2018-11-27	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.
43	CVE-2018-6952	415		2018-02-13	2018-03-06	5.0	None	Remote	Low	Not required	None	None	Partial
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
44	CVE-2018-6951	476	DoS	2018-02-13	2018-04-11	5.0	None	Remote	Low	Not required	None	None	Partial
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue.
45	CVE-2018-6872	125	DoS	2018-02-09	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.
46	CVE-2018-6759	20	DoS	2018-02-06	2018-11-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.
47	CVE-2018-6551	119	Overflow	2018-02-02	2018-02-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.
48	CVE-2018-6543	190	DoS Overflow	2018-02-02	2018-11-27	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
49	CVE-2018-6485	190	Overflow	2018-02-01	2018-10-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
50	CVE-2018-6323	190	DoS Overflow	2018-01-26	2018-02-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

Total number of vulnerabilities : 664 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14