Skip to content

GNU · weakness class

Other weaknesses

36 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
4

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Integer overflow in string/strcoll_l.c in the GNU C Library (aka glibc or libc6) 2.17 and earlier allows context-dependent attackers to cause a denial of service (crash) or possib…CVE-2012-4412Gnu · 18% likely

    CWE-189

  2. Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or exe…CVE-2014-5119Gnu · 17% likely

    CWE-189

  3. The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in…CVE-2008-1948Gnu · 12% likely

    CWE-189

  4. Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier allow context-dependent attackers to cause a denial of servic…CVE-2009-4880Gnu · 11% likely

    CWE-189

  5. Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via…CVE-2009-5029Gnu · 8.8% likely

    CWE-189

  6. The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS que…CVE-2013-7423Gnu · 5.8% likely

    CWE-17

  7. DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows…CVE-2014-8121Gnu · 5.6% likely

    CWE-17

  8. Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of serv…CVE-2008-1950Gnu · 5.0% likely

    CWE-189

  9. The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain…CVE-2015-8776Gnu · 4.8% likely

    CWE-189

  10. Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of s…CVE-2010-0001Gnu · 4.8% likely

    CWE-189

  11. Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify opti…CVE-2010-0830Gnu · 4.5% likely

    CWE-189

  12. Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…CVE-2012-1175Gnu · 4.3% likely

    CWE-189

  13. The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length value…CVE-2012-1569Gnu · 4.3% likely

    CWE-189

  14. In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion fail…CVE-2009-5155Gnu · 3.9% likely

    CWE-19

  15. Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow r…CVE-2012-3509Gnu · 3.7% likely

    CWE-189

  16. It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks…CVE-2018-10845Gnu · CVSS 5.9 · 3.6% likely

    CWE-385

  17. It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks…CVE-2018-10844Gnu · CVSS 5.9 · 3.6% likely

    CWE-385

  18. The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via…CVE-2015-8985Gnu · 2.9% likely

    CWE-19

  19. Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash)…CVE-2011-1659Gnu · 2.9% likely

    CWE-189

  20. Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection me…CVE-2012-0864Gnu · 2.7% likely

    CWE-189

  21. The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free…CVE-2013-7424Gnu · 2.7% likely

    CWE-17

  22. Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corru…CVE-2013-4332Gnu · 2.6% likely

    CWE-189

  23. contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, re…CVE-2009-5078Gnu · 2.3% likely

    CWE-254

  24. The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a buffer length, which allows context-dep…CVE-2012-3404Gnu · 2.2% likely

    CWE-189

  25. The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dep…CVE-2012-3405Gnu · 2.1% likely

    CWE-189

  26. Integer overflow in the __vstrfmon_l function in stdlib/strfmon_l.c in the strfmon implementation in the GNU C Library (aka glibc or libc6) before 2.10.1 allows context-dependent…CVE-2009-4881Gnu · 2.0% likely

    CWE-189

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.