Search CVE reports
341 – 350 of 409 results
Some fixes available 8 of 96
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."
11 affected packages
gcc-h8300-hms, binutils-h8300-hms, binutils, gcc-arm-none-eabi, gccxml...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gcc-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| binutils-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-arm-none-eabi | Not affected | Not affected | Not affected | Not affected | Not affected |
| gccxml | Not in release | Not in release | Not in release | Not in release | Not in release |
| gdb | Not affected | Not affected | Not affected | Not affected | Not affected |
| ht | Not affected | Not affected | Not affected | Not affected | Not affected |
| libiberty | Not affected | Not affected | Not affected | Not affected | Not affected |
| nescc | Not in release | Not in release | Vulnerable | Vulnerable | Vulnerable |
| sdcc | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| valgrind | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 8 of 96
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
11 affected packages
gcc-h8300-hms, binutils-h8300-hms, binutils, gcc-arm-none-eabi, gccxml...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gcc-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| binutils-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
| gcc-arm-none-eabi | Not affected | Not affected | Not affected | Not affected | Not affected |
| gccxml | Not in release | Not in release | Not in release | Not in release | Not in release |
| gdb | Not affected | Not affected | Not affected | Not affected | Not affected |
| ht | Not affected | Not affected | Not affected | Not affected | Not affected |
| libiberty | Not affected | Not affected | Not affected | Not affected | Not affected |
| nescc | Not in release | Not in release | Vulnerable | Vulnerable | Vulnerable |
| sdcc | Not affected | Not affected | Not affected | Not affected | Vulnerable |
| valgrind | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 8 of 84
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.
8 affected packages
gcc-h8300-hms, binutils-h8300-hms, binutils, gdb, ht...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gcc-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| binutils-h8300-hms | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| binutils | Not affected | Not affected | Not affected | Not affected | Not affected |
| gdb | Not affected | Not affected | Not affected | Not affected | Not affected |
| ht | Not affected | Not affected | Not affected | Not affected | Not affected |
| libiberty | Not affected | Not affected | Not affected | Not affected | Not affected |
| nescc | Not in release | Not in release | Vulnerable | Vulnerable | Vulnerable |
| valgrind | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 9 of 10
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Fixed |
Some fixes available 9 of 10
Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Fixed |
Some fixes available 9 of 10
The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Fixed |
Some fixes available 7 of 8
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an...
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Fixed |
Some fixes available 13 of 15
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw...
4 affected packages
gnutls26, gnutls28, openssl, openssl098
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Not affected |
| openssl | — | — | — | — | Fixed |
| openssl098 | — | — | — | — | Not in release |
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate...
2 affected packages
gnutls26, gnutls28
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Not affected |
Some fixes available 23 of 25
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain...
8 affected packages
gnutls26, gnutls28, nss, openjdk-6, openjdk-7...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Not affected |
| nss | — | — | — | — | Fixed |
| openjdk-6 | — | — | — | — | Not in release |
| openjdk-7 | — | — | — | — | Not in release |
| openjdk-8 | — | — | — | — | Not affected |
| openssl | — | — | — | — | Fixed |
| openssl098 | — | — | — | — | Not in release |