Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-6846

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu Iputils Redhat
Products
Binutils Iputils Enterprise Linux and 5 more
CVE-2000-1213

security flaw

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Immunix Iputils Redhat
Products
Immunix Iputils Linux
CVE-2000-1214

security flaw

Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Immunix Iputils Redhat
Products
Immunix Iputils Linux
CVE-2025-48964

iputils: iputils integer overflow

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Iputils
Products
Iputils
CVE-2025-47268

iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping

ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Iputils Redhat
Products
Iputils Enterprise Linux