SL
Vendor
Slackware
56
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2013-7172 | SL Slackware Linux Slackware | 7.8 | Nov 21 | Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use… |
| CVE-2013-7171 | SL Slackware Linux Slackware | 9.8 | Nov 21 | Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute… |
| CVE-2019-11135 | SL Slackware Slackware | 6.5 | Nov 14 | TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with… |
| CVE-2018-9336 | SL Slackware Linux Slackware | 7.8 | May 1 | openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the… |
| CVE-2018-7184 | SL Slackware Linux Slackware | 7.5 | Mar 6 | ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending… |
| CVE-2016-4448 | SL Slackware Linux Slackware | 9.8 | Jun 9 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors |
| CVE-2013-4854 | SL Slackware Linux Slackware | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… |
| CVE-2007-3798 | SL Slackware Slackware | 9.8 | Jul 16 | Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an… |
| CVE-2007-1352 | SL Slackware Linux Slackware | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… |
| CVE-2007-0823 | SL Slackware Linux Slackware | – | Feb 7 | xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xterm process, which might allow local users to bypass file… |
| CVE-2006-6235 | SL Slackware Linux Slackware | – | Dec 7 | A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP… |
| CVE-2005-3624 | SL Slackware Linux Slackware | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… |
| CVE-2005-3626 | SL Slackware Linux Slackware | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… |
| CVE-2005-3625 | SL Slackware Linux Slackware | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… |
| CVE-2004-0940 | SL Slackware Linux Slackware | 7.8 | Feb 9 | Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via… |
| CVE-2004-0881 | SL Slackware Linux Slackware | – | Jan 27 | getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in… |
| CVE-2004-0891 | SL Slackware Linux Slackware | – | Jan 27 | Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via… |
| CVE-2004-0880 | SL Slackware Linux Slackware | – | Jan 27 | getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file |
| CVE-2004-0226 | SL Slackware Linux Slackware | – | Aug 18 | Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code |
| CVE-2004-0233 | SL Slackware Linux Slackware | – | Aug 18 | Utempter allows device names that contain |
| CVE-2004-0232 | SL Slackware Linux Slackware | – | Aug 18 | Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code |
| CVE-2004-0231 | SL Slackware Linux Slackware | – | Aug 18 | Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations." |
| CVE-2004-0424 | SL Slackware Linux Slackware | – | Jul 7 | Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute… |
| CVE-2003-0977 | SL Slackware Linux Slackware | – | Jan 5 | CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests |
| CVE-2003-0962 | SL Slackware Linux Slackware | – | Dec 15 | Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibly escape the chroot jail |
| CVE-2003-0195 | SL Slackware Linux Slackware | – | Jun 16 | CUPS before 1.1.19 allows remote attackers to cause a denial of service via a partial printing request to the IPP port (631), which does not time out |
| CVE-2003-0335 | SL Slackware Linux Slackware | – | May 22 | rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and… |
| CVE-2002-1814 | SL Slackware Linux Slackware | – | Dec 31 | Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments |
| CVE-2002-0004 | SL Slackware Linux Slackware | – | Feb 27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice |
| CVE-2001-1036 | SL Slackware Linux Slackware | – | Aug 31 | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an… |
| CVE-2000-0315 | SL Slackware Linux Slackware | – | Mar 12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks |
| CVE-2000-0314 | SL Slackware Linux Slackware | – | Mar 12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and… |
| CVE-2000-0844 | SL Slackware Linux Slackware | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… |
| CVE-2000-0867 | SL Slackware Linux Slackware | – | Nov 14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel… |
| CVE-2000-0438 | SL Slackware Linux Slackware | – | May 22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter |
| CVE-1999-0856 | SL Slackware Linux Slackware | – | Dec 1 | login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist |
| CVE-1999-0746 | SL Slackware Linux Slackware | – | Aug 16 | A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service |
| CVE-1999-0433 | SL Slackware Linux Slackware | – | Mar 21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a… |
| CVE-1999-0421 | SL Slackware Linux Slackware | – | Mar 17 | During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password |
| CVE-1999-0368 | SL Slackware Linux Slackware | – | Feb 9 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a |
| CVE-1999-1422 | SL Slackware Linux Slackware | – | Jan 2 | The default configuration of Slackware 3.4, and possibly other versions, includes |
| CVE-1999-1434 | SL Slackware Linux Slackware | – | Jul 13 | login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign… |
| CVE-1999-1498 | SL Slackware Linux Slackware | – | Apr 6 | Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file |
| CVE-1999-1445 | SL Slackware Linux Slackware | – | Feb 2 | Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short… |
| CVE-1999-0341 | SL Slackware Linux Slackware | – | Jan 1 | Buffer overflow in the Linux mail program "deliver" allows local users to gain root access |
| CVE-1999-0340 | SL Slackware Linux Slackware | – | Dec 1 | Buffer overflow in Linux Slackware crond program allows local users to gain root access |
| CVE-1999-0192 | SL Slackware Linux Slackware | – | Oct 18 | Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable |
| CVE-1999-1095 | SL Slackware Linux Slackware | – | Oct 6 | sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and… |
| CVE-1999-1489 | SL Slackware Linux Slackware | – | Mar 4 | Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument |
| CVE-1999-0041 | SL Slackware Linux Slackware | – | Feb 13 | Buffer overflow in NLS (Natural Language Service) |
| CVE-1999-0298 | SL Slackware Linux Slackware | – | Feb 5 | ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a |
| CVE-1999-1299 | SL Slackware Linux Slackware | – | Feb 3 | rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown… |
| CVE-1999-1187 | SL Slackware Linux Slackware | – | Aug 26 | Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail |
| CVE-1999-1186 | SL Slackware Linux Slackware | – | Jan 2 | rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by… |
| CVE-1999-0123 | SL Slackware Linux Slackware | – | Dec 1 | Race condition in Linux mailx command allows local users to read user files |
| CVE-1999-0242 | SL Slackware Linux Slackware | – | Mar 1 | Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords |