LA
Product
Linux Advanced Workstation
65
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Linux Advanced Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-1767 | – | May 23 | Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style… Affected: 2.1 |
| CVE-2007-5365 | – | Oct 11 | Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote… Affected: 2.1 |
| CVE-2007-1352 | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… Affected: 2.1; 2.1 |
| CVE-2007-1351 | – | Apr 6 | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to… Affected: 2.1; 2.1 |
| CVE-2006-6235 | – | Dec 7 | A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP… Affected: 2.1 |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 2.1; 2.1 |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 2.1; 2.1 |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 2.1; 2.1 |
| CVE-2005-1918 | – | Dec 31 | The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted… Affected: 2.1; 2.1 |
| CVE-2005-1760 | – | Jun 13 | sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges Affected: 2.1; 2.1 |
| CVE-2005-1194 | – | May 4 | Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability… Affected: 2.1 |
| CVE-2005-0078 | – | May 2 | The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and… Affected: 2.1 |
| CVE-2005-1061 | – | May 2 | The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as… Affected: 2.1 |
| CVE-2005-0988 | – | May 2 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file… Affected: 2.1; 2.1 |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: 2.1; 2.1 |
| CVE-2004-1005 | – | Apr 14 | Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact Affected: 2.1; 2.1 |
| CVE-2004-1176 | – | Apr 14 | Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code Affected: 2.1; 2.1 |
| CVE-2004-1175 | – | Apr 14 | fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters Affected: 2.1; 2.1 |
| CVE-2004-1174 | – | Apr 14 | direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles." Affected: 2.1; 2.1 |
| CVE-2004-1093 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory." Affected: 2.1; 2.1 |
| CVE-2004-1092 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory Affected: 2.1; 2.1 |
| CVE-2004-1091 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference Affected: 2.1; 2.1 |
| CVE-2004-1090 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header." Affected: 2.1; 2.1 |
| CVE-2004-1009 | – | Apr 14 | Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors Affected: 2.1; 2.1 |
| CVE-2004-1004 | – | Apr 14 | Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact Affected: 2.1; 2.1 |
| CVE-2005-0699 | – | Mar 8 | Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute… Affected: 2.1; 2.1 |
| CVE-2005-0667 | – | Mar 7 | Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing… Affected: 2.1; 2.1 |
| CVE-2004-0886 | – | Jan 27 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect… Affected: 2.1; 2.1 |
| CVE-2004-0882 | – | Jan 27 | Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a… Affected: 2.1; 2.1 |
| CVE-2004-0888 | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… Affected: 2.1; 2.1 |
| CVE-2004-0889 | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: 2.1; 2.1 |
| CVE-2004-0902 | – | Jan 27 | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of… Affected: 2.1; 2.1 |
| CVE-2004-0903 | – | Jan 27 | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows… Affected: 2.1; 2.1 |
| CVE-2004-0930 | – | Jan 27 | The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request… Affected: 2.1; 2.1 |
| CVE-2004-0883 | – | Jan 10 | Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information… Affected: 2.1; 2.1 |
| CVE-2004-1072 | – | Jan 10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could… Affected: 2.1; 2.1 |
| CVE-2004-1071 | – | Jan 10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an… Affected: 2.1; 2.1 |
| CVE-2004-1073 | – | Jan 10 | The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by… Affected: 2.1; 2.1 |
| CVE-2004-1070 | – | Jan 10 | The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to… Affected: 2.1; 2.1 |
| CVE-2004-1068 | – | Jan 10 | A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition Affected: 2.1; 2.1 |
| CVE-2004-0949 | – | Jan 10 | The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could… Affected: 2.1; 2.1 |
| CVE-2004-0802 | – | Dec 31 | Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than… Affected: 2.1; 2.1 |
| CVE-2004-0904 | – | Dec 31 | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute… Affected: 2.1; 2.1 |
| CVE-2004-0817 | – | Dec 31 | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file Affected: 2.1; 2.1 |
| CVE-2004-0803 | – | Dec 23 | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to… Affected: 2.1; 2.1 |
| CVE-2004-1145 | – | Dec 15 | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java… Affected: 2.1; 2.1 |
| CVE-2004-1142 | – | Dec 15 | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet Affected: 2.1; 2.1 |
| CVE-2004-1139 | – | Dec 15 | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash) Affected: 2.1; 2.1 |
| CVE-2004-0635 | – | Dec 6 | The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string,… Affected: 2.1 |
| CVE-2004-0634 | – | Dec 6 | The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes… Affected: 2.1 |
