| CVE-2019-20011 | ÉLEVÉE8.8 | An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c. | 27/12/2019 |
| CVE-2019-20010 | ÉLEVÉE8.8 | An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. | 27/12/2019 |
| CVE-2019-20009 | MOYENNE6.5 | An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec. | 27/12/2019 |
| CVE-2015-8313 | MOYENNE5.9 | GnuTLS incorrectly validates the first byte of padding in CBC modes | 20/12/2019 |
| CVE-2019-18276 | ÉLEVÉE7.8 | An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support "saved UID | 28/11/2019 |
| CVE-2015-1396 | ÉLEVÉE7.5 | A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196. | 25/11/2019 |
| CVE-2019-16200 | ÉLEVÉE7.5 | GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the http_cgi_write functio | 20/11/2019 |
| CVE-2019-19126 | FAIBLE3.3 | On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program | 19/11/2019 |
| CVE-2012-0824 | CRITIQUE9.8 | gnusound 0.7.5 has format string issue | 19/11/2019 |
| CVE-2019-18397 | ÉLEVÉE7.8 | A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBi | 13/11/2019 |
| CVE-2019-18862 | ÉLEVÉE7.8 | maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode. | 11/11/2019 |
| CVE-2002-2439 | ÉLEVÉE7.8 | Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. | 23/10/2019 |
| CVE-2019-12290 | ÉLEVÉE7.5 | GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punyco | 22/10/2019 |
| CVE-2019-18224 | CRITIQUE9.8 | idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. | 21/10/2019 |
| CVE-2019-18192 | ÉLEVÉE7.8 | GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365. | 17/10/2019 |
| CVE-2019-17544 | CRITIQUE9.1 | libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character. | 14/10/2019 |
| CVE-2019-17451 | MOYENNE6.5 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm. | 10/10/2019 |
| CVE-2019-17450 | MOYENNE6.5 | find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file. | 10/10/2019 |
| CVE-2019-16166 | MOYENNE6.5 | GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c. | 09/09/2019 |
| CVE-2019-16165 | MOYENNE6.5 | GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. | 09/09/2019 |