Gentoo vulnerabilities
97 vulnerabilities
Known vulnerabilities in Gentoo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 29 products.
Products
29- Linux57 vulnerabilities
- Portage6 vulnerabilities
- Webmin5 vulnerabilities
- Logrotate3 vulnerabilities
- Cman2 vulnerabilities
- Fence2 vulnerabilities
- Soko2 vulnerabilities
- Xdg Utils2 vulnerabilities
- Xnview2 vulnerabilities
- App Crypt Pinentry1 vulnerabilities
- Dev Python Flower1 vulnerabilities
- Ebuild For Slurm1 vulnerabilities
- File1 vulnerabilities
- Glibc1 vulnerabilities
- Linux Eix1 vulnerabilities
- Linux Webapp Config1 vulnerabilities
- Media Libs Jpeg1 vulnerabilities
- Mirrorselect1 vulnerabilities
- Mldonkey Ebuild1 vulnerabilities
- Nullmailer1 vulnerabilities
- Nvclock1 vulnerabilities
- Nview1 vulnerabilities
- Php Toolkit1 vulnerabilities
- Poppassd Pam1 vulnerabilities
- Qt Unixodbc1 vulnerabilities
- Rootkit Hunter1 vulnerabilities
- Sci Mathematics Gimps1 vulnerabilities
- Security1 vulnerabilities
- Syslinux1 vulnerabilities
CVE-2003-1422gentoosyslinux
EPSS score1.42%
Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via unknown vectors.CVE-2003-0681applemac_os_x+14EPSS score22.36%
A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.CVE-2003-0694applemac_os_x+18EPSS score66.18%
The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.CVE-2013-2100gentooportage+1EPSS score1.57%
The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify binary package lists via a crafted certificate.CVE-2013-4223debiannullmailer+1EPSS score1.33%
The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.CVE-2007-2194gentooxnviewEPSS score18.87%
Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string. NOTE: some of these details are obtained from third party information.CVE-2007-2026debianfile+1EPSS score2.09%
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.CVE-2007-0476gentoolinuxEPSS score0.36%
The gencert.sh script, when installing OpenLDAP before 2.1.30-r10, 2.2.x before 2.2.28-r7, and 2.3.x before 2.3.30-r2 as an ebuild in Gentoo Linux, does not create temporary directories in /tmp securely during emerge, which allows local users to overwrite arbitrary files via a symlink attack.CVE-2007-5714gentoomldonkey_ebuildEPSS score1.80%
The Gentoo ebuild of MLDonkey before 2.9.0-r3 has a p2p user account with an empty default password and valid login shell, which might allow remote attackers to obtain login access and execute arbitrary code.CVE-2007-6249gentooportageEPSS score0.43%
etc-update in Portage before 2.1.3.11 on Gentoo Linux relies on the umask to set permissions for the merge file, often resulting in permissions weaker than those of the original files, which might allow local users to obtain sensitive information by reading the merge file.CVE-2007-3531gentoonvclockEPSS score0.29%
The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.CVE-2007-3508debianglibc+1EPSS score0.45%
Integer overflow in the process_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via a large LD_HWCAP_MASK environment variable value. NOTE: the glibc maintainers state that they do not believe that this issue is exploitable for code executionCVE-2016-20021gentooportage+1EPSS score0.47%
In Gentoo Portage before 3.0.47, there is missing PGP validation of executed code: the standalone emerge-webrsync downloads a .gpgsig file but does not perform signature verification. Unless emerge-webrsync is used, Portage is not vulnerable.CVE-2020-36770gentooebuild_for_slurmEPSS score0.37%
pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign root's ownership on files in the live root filesystem. This could be exploited by the slurm user to become the owner of root-owned files.CVE-2014-9622debianxdg-utils+6EPSS score3.26%
Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.CVE-2005-1270debianrkhunter+1EPSS score0.34%
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.CVE-2005-1707gentoolinux_webapp-configEPSS score0.98%
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file.CVE-2005-0005debianimagemagick+11EPSS score4.38%
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.CVE-2005-0427gentoowebminEPSS score2.20%
The ebuild of Webmin before 1.170-r3 on Gentoo Linux includes the encrypted root password in the miniserv.users file when building a tbz2 of the webmin package, which allows remote attackers to obtain and possibly crack the encrypted password.CVE-2005-0002gentoopoppassd_pamEPSS score2.44%
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.