Vulnerabilities > GNU > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-05-17 CVE-2023-1972 Out-of-bounds Write vulnerability in GNU Binutils
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c.
network
low complexity
gnu CWE-787
6.5
2023-04-15 CVE-2021-34337 Unspecified vulnerability in GNU Mailman
An issue was discovered in Mailman Core before 3.3.5.
local
high complexity
gnu
6.3
2023-04-08 CVE-2023-24626 Unspecified vulnerability in GNU Screen
socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.
local
low complexity
gnu
6.5
2023-02-28 CVE-2023-27371 Out-of-bounds Read vulnerability in GNU Libmicrohttpd
GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method.
network
high complexity
gnu CWE-125
5.9
2023-01-30 CVE-2022-48303 Out-of-bounds Read vulnerability in multiple products
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump.
local
low complexity
gnu fedoraproject CWE-125
5.5
2023-01-27 CVE-2022-4285 NULL Pointer Dereference vulnerability in multiple products
An illegal memory access flaw was found in the binutils package.
local
low complexity
gnu fedoraproject redhat CWE-476
5.5
2022-10-11 CVE-2022-41550 Integer Overflow or Wraparound vulnerability in GNU Osip 5.3.0
GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header.
network
low complexity
gnu CWE-190
6.5
2022-09-06 CVE-2022-25309 Heap-based Buffer Overflow vulnerability in multiple products
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file.
local
low complexity
gnu redhat CWE-122
5.5
2022-09-06 CVE-2022-25310 NULL Pointer Dereference vulnerability in multiple products
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file.
local
low complexity
gnu redhat CWE-476
5.5
2022-09-01 CVE-2021-3826 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
network
low complexity
gnu fedoraproject CWE-119
6.5