| CVE |
Vendors |
Products |
Updated |
CVSS |
| CVE-2012-6711 |
2 Gnu, Redhat |
2 Bash, Enterprise Linux |
2019-06-20 |
4.6 |
| A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data... |
| CVE-2015-1472 |
2 Canonical, Gnu |
2 Ubuntu Linux, Glibc |
2019-06-13 |
7.5 |
| The ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service (buffer... |
| CVE-2015-0235 |
2 Oracle, Gnu |
3 Glibc, Communications Applications, Oracle Pillar Axiom |
2019-06-13 |
10.0 |
| Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2)... |
| CVE-2014-9984 |
1 Gnu |
1 Glibc |
2019-06-13 |
7.5 |
| nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd. |
| CVE-2014-9761 |
6 Gnu, Suse, Fedoraproject and 3 more |
10 Linux Enterprise Software Development Kit, Ubuntu Linux, Linux Enterprise Desktop and 7 more |
2019-06-13 |
7.5 |
| Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan,... |
| CVE-2014-9402 |
4 Gnu, Canonical, Novell and 1 more |
4 Ubuntu Linux, Glibc, Opensuse and 1 more |
2019-06-13 |
7.8 |
| The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a... |
| CVE-2014-4043 |
3 Gnu, Novell, Opensuse |
3 Glibc, Opensuse, Opensuse |
2019-06-13 |
7.5 |
| The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger use-after-free vulnerabilities. |
| CVE-2012-4412 |
1 Gnu |
1 Glibc |
2019-06-13 |
7.5 |
| Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a... |
| CVE-2010-3856 |
1 Gnu |
1 Glibc |
2019-06-13 |
7.2 |
| ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to... |
| CVE-2010-0296 |
1 Gnu |
1 Glibc |
2019-06-13 |
7.2 |
| The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial... |
| CVE-2018-1000654 |
1 Gnu |
1 Libtasn1 |
2019-06-05 |
7.1 |
| GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program... |
| CVE-2017-6891 |
1 Gnu |
1 Gnutls Libtasn1 |
2019-06-05 |
6.8 |
| Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g.... |
| CVE-2015-6806 |
1 Gnu |
1 Gnu Screen |
2019-06-02 |
5.0 |
| The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value. |
| CVE-2016-1234 |
4 Fedoraproject, Gnu, Novell and 1 more |
5 Glibc, Fedora, Opensuse and 2 more |
2019-05-31 |
5.0 |
| Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name. |
| CVE-2019-3836 |
3 Gnu, Fedoraproject, Opensuse |
3 Gnutls, Fedora, Leap |
2019-05-30 |
5.0 |
| It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages. |
| CVE-2019-3829 |
2 Gnu, Fedoraproject |
2 Gnutls, Fedora |
2019-05-30 |
5.0 |
| A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or... |
| CVE-2018-10846 |
3 Gnu, Debian, Redhat |
6 Gnutls, Debian Linux, Enterprise Linux Desktop and 3 more |
2019-05-30 |
1.9 |
| A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Prime+probe attack in combination with Lucky-13 attack to recover... |
| CVE-2018-10845 |
3 Gnu, Debian, Redhat |
5 Gnutls, Debian Linux, Enterprise Linux Desktop and 2 more |
2019-05-30 |
4.3 |
| It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing... |
| CVE-2018-10844 |
3 Gnu, Debian, Redhat |
6 Gnutls, Debian Linux, Enterprise Linux Desktop and 3 more |
2019-05-30 |
4.3 |
| It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing... |
| CVE-2018-16868 |
1 Gnu |
1 Gnutls |
2019-05-30 |
3.3 |
| A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use... |
