Vulnerabilities > GNU

DATE CVE VULNERABILITY TITLE RISK
2022-04-18 CVE-2022-29458 Out-of-bounds Read vulnerability in GNU Ncurses
ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.
network
gnu CWE-125
5.8
2022-03-26 CVE-2022-27943 Resource Exhaustion vulnerability in GNU GCC 11.2
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
network
gnu CWE-400
4.3
2022-03-16 CVE-2021-46705 Insecure Temporary File vulnerability in GNU Grub2
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files.
local
low complexity
gnu CWE-377
2.1
2022-03-10 CVE-2021-3981 Incorrect Default Permissions vulnerability in multiple products
A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content.
local
low complexity
gnu fedoraproject CWE-276
2.1
2022-01-14 CVE-2021-46019 NULL Pointer Dereference vulnerability in GNU Recutils 1.8.90
An untrusted pointer dereference in rec_db_destroy() at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
network
gnu CWE-476
4.3
2022-01-14 CVE-2021-46021 Use After Free vulnerability in GNU Recutils 1.8.90
An Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
network
gnu CWE-416
4.3
2022-01-14 CVE-2021-46022 Use After Free vulnerability in GNU Recutils 1.8.90
An Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash.
network
gnu CWE-416
4.3
2022-01-14 CVE-2021-46195 Uncontrolled Recursion vulnerability in GNU GCC 12.0
GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
network
gnu CWE-674
4.3
2022-01-14 CVE-2022-23218 Classic Buffer Overflow vulnerability in GNU Glibc
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
network
low complexity
gnu CWE-120
7.5
2022-01-14 CVE-2022-23219 Classic Buffer Overflow vulnerability in GNU Glibc
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
network
low complexity
gnu CWE-120
7.5