Vulnerabilidades en GNU
139 resultadosCVE-2025-1147LOWGNU Binutils nm nm.c internal_strlen buffer overflowEPSS 0.7%CVE-2025-1352LOWGNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruptionEPSS 0.7%CVE-2026-108976HIGHGNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list EPSS 0.6%CVE-2025-1148LOWGNU Binutils ld ldelfgen.c link_order_scan memory leakEPSS 0.6%CVE-2026-41992MEDIUMGlobal Buffer Overflow in GNU gzipEPSS 0.6%CVE-2025-1152LOWGNU Binutils ld xstrdup.c xstrdup memory leakEPSS 0.6%CVE-2025-1151LOWGNU Binutils ld xmemdup.c xmemdup memory leakEPSS 0.6%CVE-2025-1150LOWGNU Binutils ld libbfd.c bfd_malloc memory leakEPSS 0.6%CVE-2025-43920MEDIUMGNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to executeEPSS 0.6%CVE-2014-3591—Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximEPSS 0.6%CVE-2025-1182LOWGNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruptionEPSS 0.6%CVE-2025-1149LOWGNU Binutils ld xmalloc.c xstrdup memory leakEPSS 0.6%CVE-2025-1179LOWGNU Binutils ld libbfd.c bfd_putl64 memory corruptionEPSS 0.6%CVE-2002-2439—Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.EPSS 0.5%CVE-2026-71391MEDIUMOff-by-One Error in GNU Emacs for AndroidEPSS 0.5%CVE-2025-45582MEDIUMGNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victEPSS 0.5%CVE-2025-43921MEDIUMGNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. NOTE:EPSS 0.5%CVE-2025-69720HIGHThe infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.EPSS 0.5%CVE-2026-48829HIGHIn GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanyiEPSS 0.5%CVE-2026-71394MEDIUMHeap Use of Uninitialized Memory in GNU Emacs for AndroidEPSS 0.4%