gnu security advisories
50 threat alerts tracking vulnerabilities and security advisories that affect gnu products.
Vulnios monitors gnu CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent gnu security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-39331 — gnu — emacs
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.
criticalCVE-2024-39331Critical Vulnerability: CVE-2023-25139 — gnu — glibc
sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the
criticalCVE-2023-25139Critical Vulnerability: CVE-2022-23218 — gnu, oracle — glibc, communications_cloud_native_core_unified_data_repository
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may r
criticalCVE-2022-23218Critical Vulnerability: CVE-2022-23219 — gnu, oracle — glibc, communications_cloud_native_core_binding_support_function
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may
criticalCVE-2022-23219Critical Vulnerability: CVE-2021-46848 — gnu, fedoraproject — libtasn1, fedora
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
criticalCVE-2021-46848Critical Vulnerability: CVE-2026-24061 — gnu, debian — inetutils, debian_linux
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
criticalCVE-2026-24061Critical Vulnerability: CVE-2021-28237 — gnu — libredwg
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
criticalCVE-2021-28237Critical Vulnerability: CVE-2021-35942 — gnu, netapp — glibc, active_iq_unified_manager
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially re
criticalCVE-2021-35942Critical Vulnerability: CVE-2021-33574 — gnu, fedoraproject — glibc, fedora
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter)
criticalCVE-2021-33574Critical Vulnerability: CVE-2021-3466 — gnu, redhat — libmicrohttpd, enterprise_linux
A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that
criticalCVE-2021-3466Critical Vulnerability: CVE-2021-20232 — gnu, redhat — gnutls, enterprise_linux
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
criticalCVE-2021-20232Critical Vulnerability: CVE-2021-20231 — gnu, redhat — gnutls, enterprise_linux
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
criticalCVE-2021-20231Critical Vulnerability: CVE-2021-26937 — gnu, debian — screen, debian_linux
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 c
criticalCVE-2021-26937Critical Vulnerability: CVE-2019-20914 — gnu — libredwg
An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.
criticalCVE-2019-20914Critical Vulnerability: CVE-2017-9104 — gnu, opensuse — adns, leap
An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.
criticalCVE-2017-9104Critical Vulnerability: CVE-2017-9109 — gnu, opensuse — adns, leap
An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at th
criticalCVE-2017-9109Critical Vulnerability: CVE-2017-9103 — gnu, opensuse — adns, leap
An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value can be used as the first label length. Dep
criticalCVE-2017-9103Critical Vulnerability: CVE-2020-9366 — gnu — screen
A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have
criticalCVE-2020-9366Critical Vulnerability: CVE-2019-20433 — gnu — aspell
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the
criticalCVE-2019-20433Critical Vulnerability: CVE-2015-4042 — gnu — coreutils
Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly have unspecified other
criticalCVE-2015-4042Critical Vulnerability: CVE-2019-18224 — gnu — libidn2
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
criticalCVE-2019-18224Critical Vulnerability: CVE-2019-17544 — gnu, canonical — aspell, ubuntu_linux
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character.
criticalCVE-2019-17544Critical Vulnerability: CVE-2019-1010022 — gnu — glibc
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability
criticalCVE-2019-1010022Critical Vulnerability: CVE-2019-5953 — gnu — wget
Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.
criticalCVE-2019-5953Critical Vulnerability: CVE-2019-9775 — gnu, opensuse — libredwg, backports_sle
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.
criticalCVE-2019-9775Critical Vulnerability: CVE-2019-9774 — gnu, opensuse — libredwg, backports_sle
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c.
criticalCVE-2019-9774Critical Vulnerability: CVE-2019-9169 — gnu, netapp — glibc, cloud_backup
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.
criticalCVE-2019-9169Critical Vulnerability: CVE-2018-18751 — gnu, canonical — gettext, ubuntu_linux
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgf
criticalCVE-2018-18751Critical Vulnerability: CVE-2018-12699 — gnu, canonical — binutils, ubuntu_linux
finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds wr
criticalCVE-2018-12699Critical Vulnerability: CVE-2017-18269 — gnu, linux — glibc, linux_kernel
An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the over
criticalCVE-2017-18269Critical Vulnerability: CVE-2018-11236 — gnu, redhat — glibc, virtualization_host
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit a
criticalCVE-2018-11236Critical Vulnerability: CVE-2017-18201 — gnu — libcdio
An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
criticalCVE-2017-18201Critical Vulnerability: CVE-2018-6551 — gnu — glibc
The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close t
criticalCVE-2018-6551Critical Vulnerability: CVE-2018-6485 — gnu, redhat — glibc, virtualization_host
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a he
criticalCVE-2018-6485Critical Vulnerability: CVE-2017-15804 — gnu — glibc
The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.
criticalCVE-2017-15804Critical Vulnerability: CVE-2017-15670 — gnu — glibc
The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories us
criticalCVE-2017-15670Critical Vulnerability: CVE-2017-14062 — gnu, debian — libidn2, debian_linux
Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
criticalCVE-2017-14062Critical Vulnerability: CVE-2017-14061 — gnu — libidn2
Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
criticalCVE-2017-14061Critical Vulnerability: CVE-2014-9984 — gnu — glibc
nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash
criticalCVE-2014-9984Critical Vulnerability: CVE-2016-10324 — gnu — osip
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
criticalCVE-2016-10324Critical Vulnerability: CVE-2017-7614 — gnu — binutils
elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote at
criticalCVE-2017-7614Critical Vulnerability: CVE-2014-9939 — gnu — binutils
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
criticalCVE-2014-9939Critical Vulnerability: CVE-2017-7226 — gnu — binutils
The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses
criticalCVE-2017-7226Critical Vulnerability: CVE-2017-6969 — gnu — binutils
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as
criticalCVE-2017-6969Critical Vulnerability: CVE-2015-8972 — gnu — chess
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large inpu
criticalCVE-2015-8972Critical Vulnerability: CVE-2016-8606 — gnu, fedoraproject — guile, fedora
The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
criticalCVE-2016-8606Critical Vulnerability: CVE-1999-0199 — gnu — glibc
manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dang
criticalCVE-1999-0199Critical Vulnerability: CVE-2012-0824 — gnu — gnusound
gnusound 0.7.5 has format string issue
criticalCVE-2012-0824Critical Vulnerability: CVE-2005-3590 — gnu — glibc
The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buff
criticalCVE-2005-3590Critical Vulnerability: CVE-2014-5044 — gnu — libgfortran
Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
criticalCVE-2014-5044
Track gnu exposure across your environment
Vulnios automatically cross-references your asset inventory against new gnu CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan