Libiberty

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer ove…CVE-2016-2226Gnu · 7.2% likely

   CWE-119

2. The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled…CVE-2016-6131Gnu · 4.6% likely

   CWE-20

3. Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.CVE-2016-4492Gnu · 1.9% likely

   CWE-119

4. Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent us…CVE-2016-4490Gnu · 1.8% likely

   CWE-190

5. The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers in…CVE-2016-4491Gnu · 1.8% likely

   CWE-119

6. Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the…CVE-2016-4489Gnu · 1.7% likely

   CWE-190

7. Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec."CVE-2016-4488Gnu · 1.7% likely

   CWE-416

8. The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and cr…CVE-2016-4493Gnu · 1.7% likely

   CWE-125

9. Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."CVE-2016-4487Gnu · 1.7% likely

   CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.