SL
Product
Slackware Linux
54
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 0Low 0
Watch
Add Slackware Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-7171 | 9.8 | Nov 21 | Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute… Affected: 14.0; 14.1 |
| CVE-2016-4448 | 9.8 | Jun 9 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors Affected: 14.0; 14.1 |
| CVE-2013-7172 | 7.8 | Nov 21 | Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use… Affected: 13.1; 13.37; 14.0; 14.1 |
| CVE-2018-9336 | 7.8 | May 1 | openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the… Affected: 13.0; 13.1; 13.37; 14.0; 14.1 |
| CVE-2004-0940 | 7.8 | Feb 9 | Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via… Affected: 8.0; 8.1; 9.0; 9.1; 10.0; current |
| CVE-2018-7184 | 7.5 | Mar 6 | ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending… Affected: 14.0; 14.1; 14.2 |
| CVE-2013-4854 | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… Affected: 12.1; 12.2; 13.0; 13.1; 13.37 |
| CVE-2007-1352 | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… Affected: 9.0; 9.1; current |
| CVE-2007-0823 | – | Feb 7 | xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file… Affected: 10.2 |
| CVE-2006-6235 | – | Dec 7 | A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP… Affected: 11.0 |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: 9.0; 9.1; 10.0; 10.1; 10.2 |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: 9.0; 9.1; 10.0; 10.1; 10.2 |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: 9.0; 9.1; 10.0; 10.1; 10.2 |
| CVE-2004-0881 | – | Jan 27 | getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in… Affected: 9.1; 10.0; current |
| CVE-2004-0891 | – | Jan 27 | Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via… Affected: 9.0; 9.1; 10.0; current |
| CVE-2004-0880 | – | Jan 27 | getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file Affected: 9.1; 10.0; current |
| CVE-2004-0231 | – | Aug 18 | Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations." Affected: 9.0; 9.1 |
| CVE-2004-0233 | – | Aug 18 | Utempter allows device names that contain Affected: 9.1 |
| CVE-2004-0232 | – | Aug 18 | Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code Affected: 9.0; 9.1 |
| CVE-2004-0226 | – | Aug 18 | Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code Affected: 9.0; 9.1 |
| CVE-2004-0424 | – | Jul 7 | Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute… Affected: 9.1; current |
| CVE-2003-0977 | – | Jan 5 | CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests Affected: 8.1; 9.0; 9.1 |
| CVE-2003-0962 | – | Dec 15 | Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail Affected: 8.1; 9.0; 9.1; current |
| CVE-2003-0195 | – | Jun 16 | CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out Affected: 8.1; 9.0 |
| CVE-2003-0335 | – | May 22 | rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and… Affected: 9.0 |
| CVE-2002-1814 | – | Dec 31 | Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments Affected: 8.0 |
| CVE-2002-0004 | – | Feb 27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice Affected: 7.0; 7.1; 8.0 |
| CVE-2001-1036 | – | Aug 31 | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an… Affected: 7.1; 8.0 |
| CVE-2000-0315 | – | Mar 12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks Affected: 2.0.34 |
| CVE-2000-0314 | – | Mar 12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and… Affected: 2.0.34 |
| CVE-2000-0867 | – | Nov 14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel… Affected: All versions, or not specified |
| CVE-2000-0844 | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… Affected: 7.0; 7.1 |
| CVE-2000-0438 | – | May 22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter Affected: 3.3; 3.4; 3.5; 3.6; 3.9; 4.0 |
| CVE-1999-0856 | – | Dec 1 | login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist Affected: 7.0 |
| CVE-1999-0746 | – | Aug 16 | A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service Affected: 3.2; 3.6 |
| CVE-1999-0433 | – | Mar 21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a… Affected: 3.3; 3.4; 3.5; 3.6; 4.0 |
| CVE-1999-0421 | – | Mar 17 | During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password Affected: 3.6 |
| CVE-1999-0368 | – | Feb 9 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a Affected: 3.4; 3.5; 3.6 |
| CVE-1999-1422 | – | Jan 2 | The default configuration of Slackware 3.4, and possibly other versions, includes Affected: 2.0.35; 3.4 |
| CVE-1999-1434 | – | Jul 13 | login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign… Affected: 3.1; 3.2; 3.3; 3.4; 3.5 |
| CVE-1999-1498 | – | Apr 6 | Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file Affected: 3.4 |
| CVE-1999-1445 | – | Feb 2 | Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short… Affected: 3.3; 3.4 |
| CVE-1999-0341 | – | Jan 1 | Buffer overflow in the Linux mail program "deliver" allows local users to gain root access Affected: 2.1; 2.2; 2.3 |
| CVE-1999-0340 | – | Dec 1 | Buffer overflow in Linux Slackware crond program allows local users to gain root access Affected: 3.4 |
| CVE-1999-0192 | – | Oct 18 | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable Affected: 3.2; 3.3; 3.4; 3.5; 3.6; 3.9; +1 more |
| CVE-1999-1095 | – | Oct 6 | sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and… Affected: 3.3 |
| CVE-1999-1489 | – | Mar 4 | Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument Affected: 3.1 |
| CVE-1999-0041 | – | Feb 13 | Buffer overflow in NLS (Natural Language Service) Affected: 3.1 |
| CVE-1999-0298 | – | Feb 5 | ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a Affected: 2.1; 2.2; 2.3 |
| CVE-1999-1299 | – | Feb 3 | rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown… Affected: 3.1 |