How many gentoo linux CVEs are in CISA KEV?

None of gentoo linux's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of gentoo linux are affected?

8 distinct gentoo linux versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in gentoo linux CVEs?

gentoo linux's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-122 (Heap-based Buffer Overflow), CWE-390 (Detection of Error Condition Without Action), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

How many critical gentoo linux vulnerabilities are there?

gentoo linux has 30 critical and 51 high-severity CVEs.

What is the average severity of gentoo linux CVEs?

The average CVSS base score across gentoo linux's scored CVEs is 6.3.

gentoo linux Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: gentoo linux vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Overview

gentoo linux has 159 published CVE records since 2003, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 40 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting gentoo linux, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of gentoo linux's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical30

High51

Medium51

Low27

In CISA’s Known Exploited Vulnerabilities catalog

0

None of gentoo linux's CVEs are currently listed in CISA's KEV catalog.

Public exploits

40

40 of gentoo linux's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every gentoo linux version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.4 <= v <= 1.453 CVEs
1.1a <= v <= 1.1a13 CVEs
1.2 <= v <= 1.213 CVEs
0.5 <= v <= 0.511 CVEs
0.7 <= v <= 0.711 CVEs
2.1.30 <= v <= 2.1.301 CVE
2.2.28 <= v <= 2.2.281 CVE
2.3.30 <= v <= 2.3.301 CVE

Find a version

159 CVEs

Sort

Rsync: heap buffer overflow in rsync due to improper checksum length handling
CVE-2024-12084
Public exploit
Patch
Workaround
CWE-122
Critical · CVSS 9.8
EPSS 72.1% (99th pct)2025-01-15
Rsync: path traversal vulnerability in rsync
CVE-2024-12087
Public exploit
Patch
CWE-22
High · CVSS 7.5
EPSS 2.3% (82th pct)2025-01-14
Rsync: --safe-links option bypass leads to path traversal
CVE-2024-12088
Public exploit
Patch
CWE-22
High · CVSS 7.5
EPSS 4.7% (91th pct)2025-01-14
Rsync: rsync server leaks arbitrary client files
CVE-2024-12086
Public exploit
Patch
CWE-390
Medium · CVSS 6.8
EPSS 1.8% (77th pct)2025-01-14
Rsync: info leak via uninitialized stack contents
CVE-2024-12085
Public exploit
Patch
Workaround
CWE-908
High · CVSS 7.5
EPSS 8.8% (95th pct)2025-01-14
High vulnerability · 2022-01-21
CVE-2022-23220
Patch
High · CVSS 7.8
EPSS 0.5% (42th pct)2022-01-21
High vulnerability · 2018-06-04
CVE-2017-18285
Patch
High · CVSS 7.1
EPSS 0.3% (24th pct)2018-06-04
High vulnerability · 2018-06-04
CVE-2017-18284
Patch
High · CVSS 7.1
EPSS 0.3% (19th pct)2018-06-04
Medium vulnerability · 2018-03-12
CVE-2017-18226
Medium · CVSS 5.5
EPSS 0.2% (15th pct)2018-03-12
High vulnerability · 2018-03-12
CVE-2017-18225
High · CVSS 7.8
EPSS 0.3% (19th pct)2018-03-12
High vulnerability · 2017-10-27
CVE-2017-15945
Patch
High · CVSS 7.8
EPSS 0.4% (30th pct)2017-10-27
High vulnerability · 2017-09-25
CVE-2017-14730
High · CVSS 7.8
EPSS 0.3% (27th pct)2017-09-25
Medium vulnerability · 2014-07-29
CVE-2014-4909
Patch
Medium · CVSS 6.8
EPSS 5.4% (92th pct)2014-07-29
Low vulnerability · 2013-12-13
CVE-2013-0348
Patch
Low · CVSS 2.1
EPSS 0.5% (42th pct)2013-12-13
Medium vulnerability · 2013-11-15
CVE-2013-2032
Patch
Medium · CVSS 5.0
EPSS 2.5% (84th pct)2013-11-15
Medium vulnerability · 2013-11-15
CVE-2013-2031
Patch
Medium · CVSS 4.3
EPSS 2.5% (84th pct)2013-11-15
Medium vulnerability · 2013-10-28
CVE-2010-1159
Public exploit
Patch
Medium · CVSS 6.8
EPSS 7.3% (94th pct)2013-10-28
Medium vulnerability · 2011-03-30
CVE-2011-1549
Medium · CVSS 6.3
EPSS 0.4% (29th pct)2011-03-30
Low vulnerability · 2009-04-27
CVE-2008-6756
Patch
Low · CVSS 2.1
EPSS 0.3% (27th pct)2009-04-27
Medium vulnerability · 2008-05-12
CVE-2008-1880
Medium · CVSS 5.0
EPSS 2.1% (81th pct)2008-05-12
Low vulnerability · 2008-04-18
CVE-2008-1734
Low · CVSS 3.6
EPSS 0.3% (28th pct)2008-04-18
Medium vulnerability · 2008-03-24
CVE-2008-1292
Medium · CVSS 4.3
EPSS 1.4% (70th pct)2008-03-24
Medium vulnerability · 2008-03-24
CVE-2008-1291
Medium · CVSS 4.3
EPSS 1.4% (70th pct)2008-03-24
Medium vulnerability · 2008-03-24
CVE-2008-1290
Medium · CVSS 4.3
EPSS 1.4% (70th pct)2008-03-24
Low vulnerability · 2008-03-18
CVE-2008-1383
Low · CVSS 1.9
EPSS 0.2% (11th pct)2008-03-18
High vulnerability · 2008-02-29
CVE-2008-1078
High · CVSS 7.2
EPSS 0.5% (42th pct)2008-02-29
Critical vulnerability · 2007-12-31
CVE-2007-6337
Patch
Critical · CVSS 10.0
EPSS 2.8% (86th pct)2007-12-31
Low vulnerability · 2007-12-15
CVE-2007-6249
Low · CVSS 2.1
EPSS 0.4% (36th pct)2007-12-15
High vulnerability · 2007-09-18
CVE-2007-4137
Patch
High · CVSS 7.5
EPSS 2.3% (82th pct)2007-09-18
High vulnerability · 2007-07-27
CVE-2007-3532
High · CVSS 7.2
EPSS 0.4% (31th pct)2007-07-27

Showing 30 of 159

Common weakness types

The CWE weakness categories most often found in gentoo linux CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many gentoo linux CVEs were published each year.

2005

29

2006

6

2007

11

2008

7

2009

1

2011

1

2013

Other gentoo products

Browse vulnerabilities for other products by gentoo.

portage7 CVEs logrotate6 CVEs webmin6 CVEs cman2 CVEs fence2 CVEs soko2 CVEs xdg-utils2 CVEs xnview2 CVEs

All gentoo vulnerabilities

Frequently asked questions

Common questions about gentoo linux vulnerabilities.

How many CVEs does gentoo linux have?: gentoo linux has 159 published CVE records since 2003.
How many gentoo linux CVEs are in CISA KEV?: None of gentoo linux's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for gentoo linux vulnerabilities?: Yes — 40 of gentoo linux's CVEs have a known public exploit.
Which versions of gentoo linux are affected?: 8 distinct gentoo linux versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in gentoo linux CVEs?: gentoo linux's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-122 (Heap-based Buffer Overflow), CWE-390 (Detection of Error Condition Without Action), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
How many critical gentoo linux vulnerabilities are there?: gentoo linux has 30 critical and 51 high-severity CVEs.
What is the average severity of gentoo linux CVEs?: The average CVSS base score across gentoo linux's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.