Login Request a demo
GE
Vendor
Gentoo
28 products with CVEs on record
183
CVEs
0
On KEV
0
New 30D
Products
LI
Linux
Gentoo
9.8
136 CVEs0 on KEV0 new
PO
Portage
Gentoo
9.8
7 CVEs0 on KEV0 new
LO
Logrotate
Gentoo
–
6 CVEs0 on KEV0 new
WE
Webmin
Gentoo
–
5 CVEs0 on KEV0 new
CM
Cman
Gentoo
–
2 CVEs0 on KEV0 new
FE
Fence
Gentoo
–
2 CVEs0 on KEV0 new
SO
Soko
Gentoo
9.8
2 CVEs0 on KEV0 new
XD
Xdg-utils
Gentoo
–
2 CVEs0 on KEV0 new
XN
Xnview
Gentoo
–
2 CVEs0 on KEV0 new
AP
App-crypt Pinentry
Gentoo
–
1 CVEs0 on KEV0 new
DE
Dev-python-flower
Gentoo
5.5
1 CVEs0 on KEV0 new
EF
Ebuild For Slurm
Gentoo
9.8
1 CVEs0 on KEV0 new
FI
File
Gentoo
–
1 CVEs0 on KEV0 new
GL
Glibc
Gentoo
–
1 CVEs0 on KEV0 new
LE
Linux Eix
Gentoo
–
1 CVEs0 on KEV0 new
LW
Linux Webapp-config
Gentoo
–
1 CVEs0 on KEV0 new
MJ
Media-libs Jpeg
Gentoo
–
1 CVEs0 on KEV0 new
MI
Mirrorselect
Gentoo
–
1 CVEs0 on KEV0 new
ME
Mldonkey Ebuild
Gentoo
–
1 CVEs0 on KEV0 new
NU
Nullmailer
Gentoo
–
1 CVEs0 on KEV0 new
NV
Nvclock
Gentoo
–
1 CVEs0 on KEV0 new
NV
Nview
Gentoo
–
1 CVEs0 on KEV0 new
PT
Php Toolkit
Gentoo
–
1 CVEs0 on KEV0 new
PP
Poppassd Pam
Gentoo
–
1 CVEs0 on KEV0 new
QT
Qt-unixodbc
Gentoo
–
1 CVEs0 on KEV0 new
RH
Rootkit Hunter
Gentoo
–
1 CVEs0 on KEV0 new
SC
Sci-mathematics-gimps
Gentoo
7.3
1 CVEs0 on KEV0 new
SY
Syslinux
Gentoo
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-12084
LI
Linux
Gentoo
9.8
73%
Jan 15Rsync: heap buffer overflow in rsync due to improper checksum length handling
CVE-2024-12086
LI
Linux
Gentoo
6.8
2%
Jan 14A flaw was found in rsync
CVE-2024-12087
LI
Linux
Gentoo
7.5
2%
Jan 14Rsync: path traversal vulnerability in rsync
CVE-2024-12088
LI
Linux
Gentoo
7.5
5%
Jan 14Rsync: --safe-links option bypass leads to path traversal
CVE-2024-12085
LI
Linux
Gentoo
7.5
9%
Jan 14Rsync: info leak via uninitialized stack contents
CVE-2020-36770
EF
Ebuild For Slurm
Gentoo
9.8
0%
Jan 15pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on files in the live root filesystem
CVE-2016-20021
PO
Portage
Gentoo
9.8
0%
Jan 12In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature…
CVE-2023-28424
SO
Soko
Gentoo
9.8
1%
Mar 20Soko if the code that powers packages.gentoo.org
CVE-2023-26033
SO
Soko
Gentoo
9.1
1%
Feb 25Gentoo soko is the code that powers packages.gentoo.org
CVE-2019-20384
PO
Portage
Gentoo
5.5
0%
Jan 21Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because…
CVE-2017-14484
SC
Sci-mathematics-gimps
Gentoo
7.3
0%
Sep 15The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privileges by creating a hard link under…
CVE-2017-14483
DE
Dev-python-flower
Gentoo
5.5
0%
Sep 15flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill…
CVE-2004-2778
PO
Portage
Gentoo
7.1
0%
Jun 27Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or…
CVE-2014-9622
XD
Xdg-utils
Gentoo
–
3%
Jan 21Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL…
CVE-2013-2100
PO
Portage
Gentoo
–
2%
Sep 29The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows…
CVE-2014-4909
LI
Linux
Gentoo
–
5%
Jul 29Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute…
CVE-2013-4223
NU
Nullmailer
Gentoo
–
1%
May 23The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by…
CVE-2013-0348
LI
Linux
Gentoo
–
1%
Dec 13thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading…
CVE-2013-2032
LI
Linux
Gentoo
–
3%
Nov 18MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which…
CVE-2013-2031
LI
Linux
Gentoo
–
3%
Nov 18MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7…
CVE-2010-1159
LI
Linux
Gentoo
–
7%
Oct 28Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) large length value…
CVE-2012-4893
WE
Webmin
Gentoo
–
1%
Sep 11Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the authentication of privileged users for…
CVE-2012-2983
WE
Webmin
Gentoo
–
20%
Sep 11file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary…
CVE-2012-2982
WE
Webmin
Gentoo
–
62%
Sep 11file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe)…
CVE-2012-2981
WE
Webmin
Gentoo
–
2%
Sep 11Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka monitor type name) parameter
CVE-2011-1098
LO
Logrotate
Gentoo
–
0%
Mar 30Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions…
CVE-2011-1550
LO
Logrotate
Gentoo
–
0%
Mar 30The default configuration of logrotate on SUSE openSUSE Factory uses root privileges to process files in directories that permit non-root write access, which allows local users to…
CVE-2011-1549
LO
Logrotate
Gentoo
–
0%
Mar 30The default configuration of logrotate on Gentoo Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct…
CVE-2011-1154
LO
Logrotate
Gentoo
–
0%
Mar 30The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log…
CVE-2011-1155
LO
Logrotate
Gentoo
–
0%
Mar 30The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline)…
CVE-2011-1548
LO
Logrotate
Gentoo
–
0%
Mar 30The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to…
CVE-2008-4580
CM
Cman
Gentoo
–
0%
Oct 15fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file
CVE-2008-4579
CM
Cman
Gentoo
–
0%
Oct 15The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary…
CVE-2008-4394
PO
Portage
Gentoo
–
0%
Oct 10Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute…
CVE-2008-1734
PT
Php Toolkit
Gentoo
–
0%
Apr 18Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating…
CVE-2008-1383
LI
Linux
Gentoo
–
0%
Mar 18The docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux, stores the SSL key in a binpkg, which allows local users to extract the key from…
CVE-2008-1078
LI
Linux
Gentoo
–
1%
Feb 29expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files via a symlink attack on the expn[PID]…
CVE-2008-0386
XD
Xdg-utils
Gentoo
–
3%
Feb 4Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email
CVE-2007-6249
PO
Portage
Gentoo
–
0%
Dec 15etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original…
CVE-2007-5714
ME
Mldonkey Ebuild
Gentoo
–
2%
Oct 30The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login…
CVE-2007-3531
NV
Nvclock
Gentoo
–
0%
Jul 25The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock…
CVE-2007-3508
GL
Glibc
Gentoo
–
0%
Jul 3Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment…
CVE-2007-2194
XN
Xnview
Gentoo
–
19%
Apr 24Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string
CVE-2007-2026
FI
File
Gentoo
–
2%
Apr 13The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line…
CVE-2007-1500
LI
Linux
Gentoo
–
0%
Mar 19The Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat
CVE-2007-0476
LI
Linux
Gentoo
–
0%
Jan 25The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary…
CVE-2006-3005
MJ
Media-libs Jpeg
Gentoo
–
2%
Jun 13The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service…
CVE-2006-1390
LI
Linux
Gentoo
–
1%
Mar 25The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to…
CVE-2006-0071
AP
App-crypt Pinentry
Gentoo
–
0%
Jan 4The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0
CVE-2005-3625
LI
Linux
Gentoo
–
4%
Dec 31Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
CVE-2005-3626
LI
Linux
Gentoo
–
3%
Dec 31Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
CVE-2005-3624
LI
Linux
Gentoo
–
2%
Dec 31The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
CVE-2005-4595
NV
Nview
Gentoo
–
0%
Dec 31Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute arbitrary code via a malicious library in the current…
CVE-2005-4279
QT
Qt-unixodbc
Gentoo
–
0%
Dec 16Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the…
CVE-2005-3785
LE
Linux Eix
Gentoo
–
1%
Nov 23Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync…
CVE-2005-2557
LI
Linux
Gentoo
–
3%
Sep 28Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir…
CVE-2005-1267
LI
Linux
Gentoo
–
14%
Jun 10The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of…
CVE-2005-1707
LW
Linux Webapp-config
Gentoo
–
1%
May 24The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file
CVE-2005-1121
LI
Linux
Gentoo
–
2%
May 2Format string vulnerability in the my_xlog function in lib.c for Oops! Proxy Server 1.5.23 and earlier, as called by the auth functions in the passwd_mysql and passwd_pgsql…
CVE-2005-0988
LI
Linux
Gentoo
–
1%
May 2Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file…