Skip to content
Noroxi

GNU records

1,208 published records for vendor GNU. 5 of them have been exploited in the wild (listed in CISA KEV) and 12 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
5 · 0.4%
Weaponized
12 · 1%
Pre-auth RCE
104
With a fix record
82.1%
Median publish → KEV
2683 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1,208 records
  • CVE-2014-6271
    99Now

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    gnu · bashSep 24, 2014

  • CVE-2014-7169
    99Now

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    gnu · bashSep 24, 2014

  • CVE-2026-24061
    99Now

    telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    gnu · inetutilsJan 21, 2026

  • CVE-2014-6278
    95Now

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att

    HighCVSS 8.8KEVWeaponizedEPSS 99%

    gnu · bashSep 30, 2014

  • CVE-2023-4911
    80Now

    Glibc: buffer overflow in ld.so leading to privilege escalation

    HighCVSS 7.8KEVWeaponizedEPSS 63%

    gnu · glibcOct 3, 2023

  • CVE-2011-4862
    69This week

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and

    CriticalCVSS 10.0WeaponizedEPSS 95%

    mit · krb5-applDec 24, 2011

  • CVE-2015-0235
    68This week

    Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-depen

    CriticalCVSS 10.0WeaponizedEPSS 94%

    gnu · glibcJan 28, 2015

  • CVE-2009-3555
    65This week

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in th

    CriticalCVSS 9.8Proof of conceptEPSS 87%

    apache · http serverNov 9, 2009

  • CVE-2015-7547
    60This week

    Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc

    HighCVSS 8.1Proof of conceptEPSS 92%

    gnu · glibcFeb 18, 2016

  • CVE-2017-13089
    59Plan

    GNU Wget: stack overflow in HTTP protocol handling

    HighCVSS 8.8Proof of conceptEPSS 79%

    gnu · wgetOct 27, 2017

  • CVE-2014-7186
    59Plan

    The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bo

    CriticalCVSS 10.0Proof of conceptEPSS 64%

    gnu · bashSep 28, 2014

  • CVE-2014-6277
    59Plan

    GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att

    CriticalCVSS 10.0Proof of conceptEPSS 64%

    gnu · bashSep 27, 2014

  • CVE-2014-7187
    58Plan

    Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of

    CriticalCVSS 10.0Proof of conceptEPSS 58%

    gnu · bashSep 28, 2014

  • CVE-2024-2961
    55Plan

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converti

    HighCVSS 7.3WeaponizedEPSS 88%

    gnu · glibcApr 17, 2024

  • CVE-2026-32746
    53Plan

    telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_

    CriticalCVSS 9.8Proof of conceptEPSS 45%

    gnu · inetutilsMar 13, 2026

  • CVE-1999-0016
    49Plan

    Land IP denial of service.

    MediumCVSS 5.0Proof of conceptEPSS 96%

    cisco · iosDec 1, 1997

  • CVE-2016-4971
    49Plan

    GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

    HighCVSS 8.8Proof of conceptEPSS 46%

    gnu · wgetJun 30, 2016

  • CVE-2014-4877
    49Plan

    Absolute path traversal vulnerability in GNU Wget before 1.16, when recursion is enabled, allows remote FTP servers to write to arbitrary fi

    CriticalCVSS 9.3WeaponizedEPSS 39%

    gnu · wgetOct 29, 2014

  • CVE-2017-5334
    49Plan

    Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attacker

    CriticalCVSS 9.8No exploitEPSS 32%

    gnu · gnutlsMar 24, 2017

  • CVE-2019-3829
    48Plan

    A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7.

    HighCVSS 7.5No exploitEPSS 59%

    gnu · gnutlsMar 27, 2019

  • CVE-2017-13090
    46Plan

    GNU Wget: heap overflow in HTTP protocol handling

    HighCVSS 8.8No exploitEPSS 36%

    gnu · wgetOct 27, 2017

  • CVE-2004-1701
    46Plan

    Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execut

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    gnu · cfengineAug 9, 2004

  • CVE-2004-1170
    45Plan

    a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    gnu · a2psJan 10, 2005

  • CVE-2004-0354
    45Plan

    Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    gnu · anubisNov 23, 2004

  • CVE-2008-1948
    44Plan

    The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly c

    CriticalCVSS 10.0No exploitEPSS 12%

    gnu · gnutlsMay 21, 2008