Vulnerabilities > GNU > Low

DATE CVE VULNERABILITY TITLE RISK
2025-02-10 CVE-2025-1152 Memory Leak vulnerability in GNU Binutils 2.43
A vulnerability classified as problematic has been found in GNU Binutils 2.43.
network
high complexity
gnu CWE-401
3.7
2025-02-10 CVE-2025-1149 Memory Leak vulnerability in GNU Binutils 2.43
A vulnerability was found in GNU Binutils 2.43.
network
high complexity
gnu CWE-401
3.1
2025-02-10 CVE-2025-1148 Memory Leak vulnerability in GNU Binutils 2.43
A vulnerability was found in GNU Binutils 2.43 and classified as problematic.
network
high complexity
gnu CWE-401
3.1
2024-02-06 CVE-2024-1048 Incomplete Cleanup vulnerability in multiple products
A flaw was found in the grub2-set-bootflag utility of grub2.
local
low complexity
gnu redhat fedoraproject CWE-459
3.3
2022-03-10 CVE-2021-3981 A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content.
local
low complexity
gnu fedoraproject
3.3
2021-03-26 CVE-2021-20193 Memory Leak vulnerability in GNU TAR
A flaw was found in the src/list.c of tar 1.33 and earlier.
local
low complexity
gnu CWE-401
3.3
2021-02-24 CVE-2021-27645 Double Free vulnerability in multiple products
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system.
local
high complexity
gnu fedoraproject debian CWE-415
2.5
2020-12-27 CVE-2020-35448 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1.
local
low complexity
gnu netapp CWE-125
3.3
2019-11-19 CVE-2019-19126 Improper Initialization vulnerability in multiple products
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
local
low complexity
gnu canonical fedoraproject debian CWE-665
3.3