Vulnerabilidades em gnu
139 resultadosAnálise Vexday
A GNU possui apenas 2 vulnerabilidades registradas na base, com 1 publicada nos últimos 90 dias e nenhuma sob ataque ativo confirmado. Não há vulnerabilidades críticas (CVSS ≥ 9.0), e a fraqueza predominante é validação inadequada de entrada (CWE-20), indicando risco baixo e sem urgência imediata de remediação.
CVE-2026-28372HIGHtelnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added EPSS 0.4%CVE-2026-56968LOWGNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory diEPSS 0.4%CVE-2024-56738MEDIUMGNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.EPSS 0.4%CVE-2026-56355LOWGNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.EPSS 0.4%CVE-2026-16599MEDIUMDenial of Service in GNU wgetEPSS 0.4%CVE-2025-47816LOWlibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related tEPSS 0.4%CVE-2025-1372MEDIUMGNU elfutils eu-readelf readelf.c print_string_section buffer overflowEPSS 0.3%CVE-2025-1365MEDIUMGNU elfutils eu-readelf readelf.c process_symtab buffer overflowEPSS 0.3%CVE-2026-9605MEDIUMGNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflowEPSS 0.3%CVE-2026-53910LOWHeap-based Buffer Overflow in GNU diffutilsEPSS 0.3%CVE-2025-1377MEDIUMGNU elfutils eu-strip strip.c gelf_getsymshndx denial of serviceEPSS 0.3%CVE-2026-118384MEDIUMGNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.EPSS 0.3%CVE-2025-1376LOWGNU elfutils eu-strip elf_strptr.c elf_strptr denial of serviceEPSS 0.3%CVE-2025-7545MEDIUMGNU Binutils objcopy.c copy_section heap-based overflowEPSS 0.3%CVE-2025-47814MEDIUMlibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_EPSS 0.3%CVE-2025-47815MEDIUMlibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_EPSS 0.3%CVE-2025-5245MEDIUMGNU Binutils objdump debug.c debug_type_samep memory corruptionEPSS 0.3%CVE-2025-5001MEDIUMGNU PSPP pspp-convert.c calloc integer overflowEPSS 0.3%CVE-2025-5244MEDIUMGNU Binutils ld elflink.c elf_gc_sweep memory corruptionEPSS 0.3%CVE-2026-40553MEDIUMStack-based buffer overflow in gawkEPSS 0.3%