Skip to content

GNU · weakness class

Denial of Service

108 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
3

Every one of the 108 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attacke…CVE-2010-4052Gnu · 51% likely

    CWE-399

  2. The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denia…CVE-2016-4008Gnu · 29% likely

    CWE-399

  3. The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory c…CVE-2011-1071Gnu · 14% likely

    CWE-399

  4. The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attack…CVE-2014-9402Gnu · 7.8% likely

    CWE-399

  5. In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+'…CVE-2018-20796Gnu · 5.8% likely

    CWE-674

  6. In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not close…CVE-2018-19591Gnu · CVSS 7.5 · 5.5% likely

    CWE-404

  7. Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact v…CVE-2012-1663Gnu · 4.9% likely

    CWE-399

  8. The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memo…CVE-2018-20657Gnu · 4.0% likely

    CWE-772

  9. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the cod…CVE-2021-3326Gnu · CVSS 7.5 · 3.8% likely

    CWE-617

  10. Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a d…CVE-2016-5417Gnu · 3.4% likely

    CWE-399

  11. remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during exec…CVE-2018-12934Gnu · 3.3% likely

    CWE-770

  12. The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and a…CVE-2018-13033Gnu · 2.9% likely

    CWE-770

  13. An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.CVE-2018-6003Gnu · 2.8% likely

    CWE-674

  14. gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction fl…CVE-2008-1367Gnu · 2.8% likely

    CWE-399

  15. find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of serv…CVE-2019-17450Gnu · 2.8% likely

    CWE-674

  16. The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expr…CVE-2010-4756Gnu · 2.6% likely

    CWE-399

  17. In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a dif…CVE-2019-9192Gnu · 2.4% likely

    CWE-674

  18. An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.CVE-2017-9104Gnu · 2.4% likely

    CWE-400

  19. A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhaus…CVE-2021-3530Gnu · 2.4% likely

    CWE-674

  20. GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file.CVE-2014-9637Gnu · 2.4% likely

    CWE-399

  21. GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers fu…CVE-2017-9039Gnu · 2.1% likely

    CWE-770

  22. There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of servic…CVE-2019-9211Gnu · 2.0% likely

    CWE-617

  23. _bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of…CVE-2017-14938Gnu · 2.0% likely

    CWE-770

  24. An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiber…CVE-2018-12641Gnu · 2.0% likely

    CWE-400

  25. The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially…CVE-2017-12132Gnu · 2.0% likely

    CWE-770

  26. An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and…CVE-2018-18484Gnu · 1.9% likely

    CWE-674

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in