Gnome Gedit vulnerabilities

2 CVEs affecting Gnome Gedit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-14108, published 2017-09-05.

More from Gnome.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-1686, published 2005-05-20. Low severity, CVSS 2.6. EPSS: 7.7% chance of exploitation in the next 30 days. Format string vulnerability in gedit 2.10.2 may allow attackers to cause a denial of service (application crash) via a bin file with format string specifiers in the filename. NOTE: while this issue…
• CVE-2017-14108, published 2017-09-05. Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days. libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters.