Vulnerabilities > GNU

DATE CVE VULNERABILITY TITLE RISK
2021-05-28 CVE-2020-18395 NULL Pointer Dereference vulnerability in GNU Gama 2.04
A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs.
network
low complexity
gnu CWE-476
7.5
2021-05-26 CVE-2021-3549 Out-of-bounds Write vulnerability in GNU Binutils 2.36
An out of bounds flaw was found in GNU binutils objdump utility version 2.36.
local
low complexity
gnu CWE-787
7.1
2021-05-25 CVE-2021-33574 Use After Free vulnerability in multiple products
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.
network
low complexity
gnu fedoraproject netapp debian CWE-416
critical
9.8
2021-05-18 CVE-2020-23861 Out-of-bounds Write vulnerability in GNU Libredwg 0.10.1
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
local
low complexity
gnu CWE-787
5.5
2021-05-18 CVE-2020-23856 Use After Free vulnerability in multiple products
Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
local
low complexity
gnu fedoraproject CWE-416
5.5
2021-05-17 CVE-2020-21831 Out-of-bounds Write vulnerability in GNU Libredwg 0.10
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.
network
low complexity
gnu CWE-787
8.8
2021-05-17 CVE-2020-21842 Out-of-bounds Write vulnerability in GNU Libredwg 0.10
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.
network
low complexity
gnu CWE-787
8.8
2021-05-17 CVE-2020-21843 Out-of-bounds Write vulnerability in GNU Libredwg 0.10
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.
network
low complexity
gnu CWE-787
8.8
2021-05-17 CVE-2020-21844 Unspecified vulnerability in GNU Libredwg 0.10
GNU LibreDWG 0.10 is affected by: memcpy-param-overlap.
network
low complexity
gnu
8.8
2021-05-17 CVE-2020-21830 Out-of-bounds Write vulnerability in GNU Libredwg 0.10
A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.
network
low complexity
gnu CWE-787
8.8