Gnu الثغرات

التسلسل الزمني

النوع

منتج

GNU binutils173
GNU C Library147
GNU LibreDWG64
GNU Binutils51
GNU Mailman39

معالجة

Official Fix670
Temporary Fix0
Workaround5
Unavailable9
Not Defined289

قابلية الاستغلال

High8
Functional1
Proof-of-Concept175
Unproven24
Not Defined765

متجه الوصول

Not Defined0
Physical0
Local277
Adjacent121
Network575

توثيق

Not Defined0
High2
Low202
None769

تفاعل المستخدم

Not Defined0
Required215
None758

C3BM Index

CVSSv3 Base

≤10
≤20
≤36
≤466
≤5101
≤6284
≤7212
≤8208
≤957
≤1039

CVSSv3 Temp

≤10
≤20
≤37
≤467
≤5144
≤6277
≤7274
≤8130
≤959
≤1015

VulDB

≤10
≤20
≤37
≤4144
≤571
≤6371
≤798
≤8213
≤929
≤1040

NVD

≤10
≤20
≤31
≤42
≤54
≤6137
≤754
≤8186
≤943
≤1047

CNA

≤10
≤20
≤30
≤42
≤52
≤611
≤73
≤82
≤94
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k250
<2k347
<5k323
<10k16
<25k17
<50k13
<100k5
≥100k2

إكسبلويت اليوم

<1k950
<2k18
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (142): Anubis (2), Aspell (3), Automake (1), Bash (19), Binutils (51), Bison (4), C Library (147), Cfengine (4), Chess (4), Classpath (1), Coreutils (8), Data Display Debugger (1), Debugger (1), Ed (2), Emacs (26), Enscript (4), Escript (1), Fileutils (1), Flash Player (1), Flim (1), FreeRADIUS (12), FriBidi (1), GCC (1), GDB (2), GIMP (6), GMP (1), GNATS (1), GNUMP3D (3), GNU screen (1), GPGME (1), GRUB (3), Ghostscript (1), Gimp (1), Global (1), Gnash (2), GnuTLS (11), Gnuboard (1), Gnumeric (1), Gnump3d (2), Groff (2), Grub 2 (1), Grub Legacy (1), Guile (2), Guix (1), Hurd (4), Indent (1), InetUtils (9), Inetutils (2), Inkscape (1), Less (1), Libextractor (13), Libidn2 (2), LibreDWG (64), Libtasn1 (8), Libtool (1), LimeWire (1), MPFR (1), MPlayer (7), Mailman (39), Mailman Postorius (1), Mailutils (7), Midnight Commander (3), Multiple Precision Arithmetic Library (1), Openswan (3), PSPP (10), Parallel (2), Patch (15), Privacy Guard (3), Queue (1), RPM (1), Radius (4), Recutils (13), Rush (1), SASL libgsasl (1), Samba (17), Savane (4), Scientific Library (1), Screen (2), Serveez (1), Tar (4), WildFly (2), a2ps (3), adns (1), bash (1), binutils (173), cfengine (2), cflow (5), coreutils (3), cpio (5), ed (2), elfutils (4), emacs (2), findutils (2), finger (1), fingerd (2), gcc (15), gdb (6), gettext (2), gimp (2), glibc (5), gnash (1), gnubiff (3), gnuedu (1), gnump3d (1), gnutls (13), grep (2), groff (7), gv (2), gzip (8), ibackup (1), indent (1), inetutils (1), less (2), libcdio (3), libiberty (9), libidn (4), libmicrohttpd (4), libpng (4), libredwg (1), libtasn1 (1), libtool (1), libtool-ltdl (1), lsh (1), lsh Daemon (1), m4 (2), mailutils (1), make (1), nano (3), ncurses (1), nm (1), oSIP (5), patch (1), phpBook (3), readline (1), screen (9), sharutils (5), tar (11), texinfo (2), tramp (1), userv (1), wget (21), zlib (3)

Link to Vendor Website: https://www.gnu.org/

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
17/04/20245.35.1GNU C Library iconv تلف الذاكرةSoftware LibraryNot DefinedOfficial Fix0.000430.98CVE-2024-2961
11/04/20246.36.1GNU Savane File upload.php تجاوز الصلاحياتغير معروفNot DefinedNot Defined0.000430.06CVE-2024-29399
09/04/20246.36.3GNU Savane form_header Privilege Escalationغير معروفNot DefinedNot Defined0.000430.08CVE-2024-27632
09/04/20245.45.4GNU Savane trackers_data_delete_file تجاوز الصلاحياتغير معروفNot DefinedNot Defined0.000430.00CVE-2024-27630
09/04/20244.34.1GNU Savane usergroup.php طلب تزوير مشتركغير معروفNot DefinedOfficial Fix0.000450.00CVE-2024-27631
05/04/20246.76.5GNU GRUB UEFI System Table تلف الذاكرةغير معروفNot DefinedOfficial Fix0.000430.04CVE-2024-2312
25/03/20246.36.0GNU Emacs Org Mode Remote Code ExecutionWord Processing SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-30205
25/03/20246.36.0GNU Emacs Org Mode Remote Code ExecutionWord Processing SoftwareNot DefinedOfficial Fix0.000450.03CVE-2024-30202
25/03/20246.36.0GNU Emacs Inline MIME Remote Code ExecutionWord Processing SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-30203
25/03/20246.36.0GNU Emacs LaTeX Preview Remote Code ExecutionWord Processing SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-30204
31/01/20246.36.3GNU C Library __vsyslog_internal تلف الذاكرةSoftware LibraryNot DefinedNot Defined0.000890.04CVE-2023-6780
31/01/20247.77.7GNU C Library __vsyslog_internal تلف الذاكرةSoftware LibraryNot DefinedNot Defined0.001420.03CVE-2023-6779
31/01/20247.87.8GNU C Library __vsyslog_internal تلف الذاكرةSoftware LibraryNot DefinedNot Defined0.007700.08CVE-2023-6246
27/01/20246.36.3GNU nano read_the_list تلف الذاكرةغير معروفNot DefinedNot Defined0.000000.04CVE-2023-45932
26/01/20245.55.5GNU Midnight Commander x11conn.c x_error_handler تلف الذاكرةغير معروفNot DefinedNot Defined0.000430.04CVE-2023-45925
26/01/20243.53.5GNU ncurses tgetstr الحرمان من الخدمةغير معروفNot DefinedNot Defined0.000430.04CVE-2023-45918
26/01/20244.84.7GNU Indent set_buf_break تلف الذاكرةغير معروفNot DefinedOfficial Fix0.000420.02CVE-2024-0911
19/01/20245.55.2GNU Coreutils split split.c تلف الذاكرةغير معروفProof-of-ConceptNot Defined0.000420.06CVE-2024-0684
02/01/20245.45.4GNU libredwg decode_r2007.c section->num_pages الحرمان من الخدمةImage Processing SoftwareNot DefinedOfficial Fix0.000490.02CVE-2023-26157
12/12/20234.34.1GNU Tar PAX Archive xheader.c locate_handler الحرمان من الخدمةغير معروفNot DefinedOfficial Fix0.000450.00CVE-2023-39804
21/11/20234.84.7GNU GnuTLS RSA-PSK rsa_psk.c _gnutls_proc_rsa_psk_client_kx الكشف عن المعلوماتNetwork Encryption SoftwareProof-of-ConceptOfficial Fix0.001020.02CVE-2023-5981
16/11/20235.55.0GNU cflow main.c find_option_type تلف الذاكرةغير معروفProof-of-ConceptOfficial Fix0.000000.00CVE-2023-6031
04/10/20236.56.5GNU C Library Environment Variable ld.so تلف الذاكرةSoftware LibraryNot DefinedNot Defined0.015740.04CVE-2023-4911
01/10/20235.55.3GNU glibc تلف الذاكرةSoftware LibraryNot DefinedOfficial Fix0.000000.00CVE-2015-9761
25/09/20236.06.0GNU C Library getaddrinfo.c free_and_return الحرمان من الخدمةSoftware LibraryNot DefinedOfficial Fix0.000930.00CVE-2023-5156

948 بعض الادخالات لم يتم عرضها

Interested in the pricing of exploits?

See the underground prices here!