Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 412

Export CSV
CVE-2017-8871

libcroco: Infinite loop in the cr_parser_parse_selector_core function

The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.

CVSS 3.1 · 6.5 Medium EPSS 12.9% KEV · Not listed
Vendors
Gnome Opensuse
Products
Libcroco Leap
CVE-2017-11171

gnome-session: Bad reference counting in accept_ice_connection() permits resource exhaustion

Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data (an invalid magic cookie). Each failed authentication attempt will leak a file descriptor in gnome-session. When the maximum number of file descriptors is exhausted in the gnome-session process, it will enter an infinite loop trying to communicate without success, consuming 100% of the CPU. The graphical session associated with the gnome-session process will stop working correctly, because communication with gnome-session is no longer possible.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnome
Products
Gnome-session
CVE-2017-11464

librsvg: SIGFPE is raised in box_blur_line function of rsvg-filter.c

A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.

CVSS 3.0 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Gnome
Products
Librsvg
CVE-2017-11590

libgxps: NULL pointer dereference in the caseless_hash function

There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Gnome
Products
Libgxps
CVE-2017-1000083

evince: command injection via filename in tar-compressed comics archive

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

CVSS 3.0 · 7.8 High EPSS 51.1% KEV · Not listed
Vendors
Debian Gnome Redhat
Products
Debian Linux Evince Enterprise Linux and 6 more
CVE-2017-14108

gedit: CPU consumption via crafted file

libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Gnome
Products
Gedit
CVE-2015-2675

rest: memory corruption when using oauth because of implicit declaration of rest_proxy_call_get_url

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of service (application crash) via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interface on an object representing a Flickr account.

CVSS 3.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Gnome Redhat
Products
Librest Enterprise Linux
CVE-2017-14604

nautilus: Insufficient validation of trust of .desktop files with execute permission

GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Debian Gnome Redhat
Products
Debian Linux Nautilus Enterprise Linux
CVE-2017-1000159

evince: Command injection when exporting to PDF

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

CVSS 3.0 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Gnome
Products
Evince
CVE-2017-2862

gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.

CVSS 3.1 · 7.8 High EPSS 4.6% KEV · Not listed
Vendors
Debian Gnome Redhat
Products
Debian Linux Gdk-pixbuf Enterprise Linux
CVE-2017-2870

gdk-pixbuf2: Integer overflow in tiff_image_parse function

An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.

CVSS 3.1 · 7.8 High EPSS 2.6% KEV · Not listed
Vendors
Debian Gnome
Products
Debian Linux Gdk-pixbuf
CVE-2017-7961

libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function

The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Gnome
Products
Libcroco
CVE-2017-5884

gtk-vnc: Improper check of framebuffer boundaries when processing a tile

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Gtk-vnc Enterprise Linux
CVE-2017-5885

gtk-vnc: Integer overflow when processing SetColorMapEntries

Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.

CVSS 3.0 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Fedoraproject Gnome Redhat
Products
Fedora Gtk-vnc Enterprise Linux
CVE-2017-6311

gdk-pixbuf: NULL pointer dereference in gdk-pixbuf-thumbnailer

gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Fedoraproject Gnome
Products
Fedora Gdk-pixbuf
CVE-2017-6312

gdk-pixbuf: Out-of-bounds read in io-ico.c

Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.

CVSS 3.1 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Debian Fedoraproject Gnome
Products
Debian Linux Fedora Gdk-pixbuf
CVE-2017-6313

gdk-pixbuf: Integer underflow in io-icns.c

Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file.

CVSS 3.1 · 7.1 High EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Gnome
Products
Debian Linux Fedora Gdk-pixbuf
CVE-2017-6314

gdk-pixbuf: Infinite loop in io-tiff.c

The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.

CVSS 3.1 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Gnome
Products
Debian Linux Fedora Gdk-pixbuf
CVE-2016-6163

librsvg2: Out-of-bounds read when processing crafted SVG file

The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Gnome
Products
Librsvg
CVE-2017-7960

libcroco: Out-of-bounds read due to missing index check in cr-input.c

The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnome
Products
Libcroco