Skip to content

Slackware · product

Slackware Linux

19 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
2

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

  1. CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out.CVE-2003-0195Slackware · 11% likely
  2. Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.CVE-1999-0192Slackware · 10% likely
  3. Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbit…CVE-2013-7171Slackware · 6.3% likely

    CWE-20

  4. Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords.CVE-1999-0242Slackware · 2.3% likely
  5. During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password.CVE-1999-0421Slackware · 1.6% likely
  6. Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short s…CVE-1999-1445Slackware · 1.3% likely
  7. rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and…CVE-2003-0335Slackware · 1.1% likely
  8. Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.CVE-1999-1489Slackware · 1.1% likely
  9. login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.CVE-1999-0856Slackware · 1.0% likely
  10. Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.CVE-1999-1498Slackware · 0.9% likely
  11. login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign…CVE-1999-1434Slackware · 0.8% likely
  12. xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file pe…CVE-2007-0823Slackware · 0.5% likely
  13. Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use…CVE-2013-7172Slackware · 0.5% likely

    CWE-20

  14. The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the P…CVE-2004-0530Slackware · 0.4% likely
  15. Buffer overflow in the Linux mail program "deliver" allows local users to gain root access.CVE-1999-0341Slackware · 0.4% likely
  16. Buffer overflow in Linux Slackware crond program allows local users to gain root access.CVE-1999-0340Slackware · 0.4% likely
  17. sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and…CVE-1999-1095Slackware · 0.3% likely
  18. The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users…CVE-1999-1422Slackware · 0.3% likely
  19. Race condition in Linux mailx command allows local users to read user files.CVE-1999-0123Slackware · 0.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.