LI
Product
Linux
229
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-0083 | 9.8 | Mar 15 | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges Affected: 7.0; 7.1; 7.2 |
| CVE-1999-0043 | 9.8 | Dec 4 | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others Affected: 4.0; 4.1 |
| CVE-2018-20346 | 8.1 | Dec 21 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3… Affected: 6.0 |
| CVE-2018-17962 | 7.5 | Oct 9 | Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used Affected: 6.0 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 7.2; 7.3; 8.0 |
| CVE-2016-3699 | 7.4 | Oct 7 | The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure… Affected: 7.2 |
| CVE-2014-3250 | 6.5 | Dec 11 | The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information… Affected: All versions, or not specified |
| CVE-2023-5981 | 5.9 | Nov 28 | Gnutls: timing side-channel in the rsa-psk authentication Affected: 8.0; 9.0 |
| CVE-1999-0011 | 5.4 | Apr 8 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer Affected: 4.2; 5.0 |
| CVE-2007-5079 | – | Sep 25 | Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions Affected: 4.0 |
| CVE-2007-3379 | – | Sep 17 | Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform allows local users to cause a denial of service (OOPS) via unspecified vectors… Affected: 4.0 |
| CVE-2007-3103 | – | Jul 15 | The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the… Affected: All versions, or not specified |
| CVE-2007-1352 | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… Affected: 9.0 |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 7.3; 9.0 |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 7.3; 9.0 |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 7.3; 9.0 |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 9.0 |
| CVE-2004-1235 | – | Apr 14 | Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute… Affected: 7.3; 9.0 |
| CVE-2005-0750 | – | Mar 27 | The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-0902 | – | Jan 27 | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-0903 | – | Jan 27 | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-1026 | – | Jan 10 | Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-1025 | – | Jan 10 | Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-0904 | – | Dec 31 | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-1335 | – | Dec 15 | Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-1333 | – | Dec 15 | Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-0619 | – | Dec 6 | Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary… Affected: 8.0; 8.0; 8.0 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 7.2; 7.3; 8.0 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 7.2; 7.3; 8.0 |
| CVE-2004-1613 | – | Oct 18 | Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3)… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2004-0905 | – | Sep 14 | Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute… Affected: 7.3; 7.3; 7.3; 9.0 |
| CVE-2003-0989 | – | Feb 17 | tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057 Affected: 9.0 |
| CVE-2003-0552 | – | Aug 27 | Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target Affected: 2.4.2 |
| CVE-2003-0551 | – | Aug 27 | The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service Affected: 2.4.2 |
| CVE-2003-0550 | – | Aug 27 | The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology Affected: 2.4.2 |
| CVE-2003-0464 | – | Aug 27 | The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0461 | – | Aug 27 | /proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial links, which could allow local users to obtain potentially sensitive information such… Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0442 | – | Jul 24 | Cross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before 4.3.2 (session.use_trans_sid) allows remote attackers to insert arbitrary script… Affected: 8.0; 9.0 |
| CVE-2003-0434 | – | Jul 24 | Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0364 | – | Jun 16 | The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large… Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0370 | – | Jun 16 | Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a… Affected: 7.1; 7.2 |
| CVE-2003-0354 | – | Jun 16 | Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands… Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0248 | – | Jun 16 | The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0247 | – | Jun 16 | Unknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ("kernel oops") Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2002-1155 | – | Jun 16 | Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0194 | – | Jun 9 | tcpdump does not properly drop privileges to the pcap user when starting up Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0188 | – | Jun 9 | lv reads a .lv file from the current working directory, which allows local users to execute arbitrary commands as other lv users by placing malicious .lv files into other… Affected: 7.1; 7.2; 7.3; 8.0; 9.0 |
| CVE-2003-0135 | – | Apr 11 | vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalone service, which inadvertently prevents vsftpd from… Affected: 9.0 |
| CVE-2002-1509 | – | Mar 3 | A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users… Affected: 7.2; 7.2; 7.3; 8.0 |
| CVE-2003-0041 | – | Feb 19 | Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client Affected: 6.2; 7.0; 7.1; 7.2; 7.3; 8.0 |