Lucene search
+L

20404 matches found

Cvelist
Cvelist
•added 2025/05/27 1:00 p.m.•70 views

CVE-2025-5244 GNU Binutils ld elflink.c elf_gc_sweep memory corruption

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

5.3CVSS0.00284EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2025/05/27 1:00 p.m.•18 views

CVE-2025-5244

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS5AI score0.00284EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2025/05/27 1:00 p.m.•11 views

CVE-2025-5244 GNU Binutils ld elflink.c elf_gc_sweep memory corruption

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

5.3CVSS5.3AI score0.00284EPSS
SaveExploits1References7
CVE
CVE
•added 2025/05/27 1:00 p.m.•159 views

CVE-2025-5244

CVE-2025-5244 affects GNU Binutils up to 2.44. The vulnerability is in the ld component, specifically the function elf_gc_sweep in bfd/elflink.c , where input length handling leads to memory corruption. The exploit requires a local attack vector, and public disclosures indicate the exploit is ava...

7.8CVSS6.8AI score0.00284EPSS
SaveExploits1References9Affected Software1
Mend
Mend
•added 2025/05/27 1:00 p.m.•6 views

CVE-2025-5244

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS0.00284EPSS
SaveExploits1References11
osv_cve
osv_cve
•added 2025/05/27 1:00 p.m.•6 views

CVE-2025-5244 GNU Binutils ld elflink.c elf_gc_sweep memory corruption

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

4.8CVSS5.3AI score
SaveExploits0References11
AlpineLinux
AlpineLinux
•added 2025/05/27 1:00 p.m.•20 views

CVE-2025-5244

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS7.1AI score0.00284EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/05/27 12:00 a.m.•21 views

GIMP security vulnerabilities

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from a stack overflow in the aniloadimage function, which could lead to the execution of arbitrary code...

7.3CVSS7.5AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/27 12:00 a.m.•18 views

GNU Binutils Buffer Error Vulnerability

GNU Binutils is a set of programming language utility programs developed by the American GNU community. A buffer overflow vulnerability exists in GNU Binutil, which stems from the failure of the function debugtypesamep in the file /binutils/debug.c to correctly validate the length of input data,...

7.8CVSS7AI score0.00286EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/05/27 12:00 a.m.•10 views

GNU coreutils security vulnerabilities

GNU coreutils is a core toolset of the GNU community. GNU coreutils suffers from a buffer overflow vulnerability that originates from a boundary error in the function begfield in the sort tool when handling untrusted input, which can be exploited by an attacker to cause a crash or data disclosure...

4.4CVSS6AI score0.00297EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•3 views

CVE-2025-5278: Stack-based Buffer Overflow

A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitiv...

4.4CVSS5.8AI score0.00297EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•3 views

CVE-2025-5244: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed...

7.8CVSS4.6AI score0.00284EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/27 12:00 a.m.•7 views

CVE-2025-5245: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debugtypesamep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been...

7.8CVSS4.7AI score0.00286EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•22 views

GNU Screen security vulnerabilities

GNU Screen is an application from the American GNU community. It provides the effect of getting multiple virtual terminals on one physical terminal. GNU Screen suffers from an information disclosure vulnerability that can be exploited by attackers to infer path information...

3.3CVSS6AI score0.00224EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/26 12:00 a.m.•27 views

GNU Screen security vulnerabilities

Gnu Screen is a terminal multiplexing tool developed by the GNU project that allows users to create multiple virtual terminal sessions in the same physical terminal and supports session resumption, window switching and multi-user sharing. Gnu Screen suffers from a competitive condition...

5.7CVSS6.5AI score0.00175EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/05/26 12:00 a.m.•20 views

Fedora: Security Advisory (FEDORA-2024-f19c79e713)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.02187EPSS
SaveExploits1References5
osv_mgasa
osv_mgasa
•added 2025/05/24 11:25 p.m.•17 views

MGASA-2025-0164 Updated glibc packages fix security vulnerability

An untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library versions 2.27 to 2.38 allows attacker-controlled loading of dynamically shared libraries in statically compiled setuid binaries that call dlopen including internal dlopen calls after setlocale or calls to NSS...

7.8CVSS7.8AI score0.00593EPSS
SaveExploits1References4
Mageia
Mageia
•added 2025/05/24 11:25 p.m.•32 views

Updated glibc packages fix security vulnerability

An untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library versions 2.27 to 2.38 allows attacker-controlled loading of dynamically shared libraries in statically compiled setuid binaries that call dlopen including internal dlopen calls after setlocale or calls to NSS...

7.8CVSS7.1AI score0.00593EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/23 10:12 a.m.•21 views

CVE-2024-29399

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component...

7.6CVSS8.1AI score0.00948EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:09 a.m.•25 views

CVE-2024-27630

Insecure Direct Object Reference IDOR in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackersdatadeletefile function...

7.5CVSS7.1AI score0.00819EPSS
SaveExploits1References1
Rows per page
Query Builder