| CVE-2019-20633 | MEDIO5.5 | GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952. | 25/03/2020 |
| CVE-2020-10029 | MEDIO5.5 | The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2 | 04/03/2020 |
| CVE-2020-9366 | CRÍTICO9.8 | A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact. | 24/02/2020 |
| CVE-2015-0294 | ALTO7.5 | GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. | 27/01/2020 |
| CVE-2019-20433 | CRÍTICO9.1 | libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELL_CONF environment variable. | 27/01/2020 |
| CVE-2015-4042 | CRÍTICO9.8 | Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via long strings. | 24/01/2020 |
| CVE-2015-4041 | ALTO7.8 | The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by multibyte characters, which allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have uns | 24/01/2020 |
| CVE-2019-3697 | ALTO7.8 | UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions. | 24/01/2020 |
| CVE-2020-6615 | MEDIO6.5 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl). | 08/01/2020 |
| CVE-2020-6614 | ALTO8.1 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c. | 08/01/2020 |
| CVE-2020-6613 | ALTO8.1 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c. | 08/01/2020 |
| CVE-2020-6612 | ALTO8.1 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c. | 08/01/2020 |
| CVE-2020-6611 | MEDIO6.5 | GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c. | 08/01/2020 |
| CVE-2020-6610 | MEDIO6.5 | GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c. | 08/01/2020 |
| CVE-2020-6609 | ALTO8.8 | GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c. | 08/01/2020 |
| CVE-2019-14866 | ALTO7.3 | In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting thos | 07/01/2020 |
| CVE-2019-20015 | MEDIO6.5 | An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec. | 27/12/2019 |
| CVE-2019-20014 | ALTO8.8 | An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. | 27/12/2019 |
| CVE-2019-20013 | MEDIO6.5 | An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec. | 27/12/2019 |
| CVE-2019-20012 | MEDIO6.5 | An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec. | 27/12/2019 |