Slackware vulnerabilities, page 3
54 vulnerabilities
Known vulnerabilities in Slackware products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
CVE-1999-0856slackwareslackware_linux
EPSS score1.04%
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist.CVE-2004-0226debianmc+4EPSS score3.94%
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.CVE-2004-0940apachehttp_server+6EPSS score4.83%
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.CVE-2004-0891gentoolinux+3EPSS score6.86%
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.CVE-2004-0233redhatutempter+4EPSS score1.09%
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.CVE-2004-0232debianmc+4EPSS score2.94%
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.CVE-2004-0880gentoolinux+2EPSS score0.31%
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.CVE-2004-0424linuxlinux_kernel+2EPSS score1.24%
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.CVE-2004-0881gentoolinux+2EPSS score0.39%
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.CVE-2004-0231debianmc+4EPSS score0.38%
Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."CVE-2002-1814mandrakesoftmandrake_linux+2EPSS score1.12%
Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.CVE-2002-0004calderaopenlinux_server+8EPSS score1.34%
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.CVE-2019-11135alpineintel-ucode+407EPSS score3.13%
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.CVE-2006-6235debiangnupg2+9EPSS score5.87%
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.