fwupdate vulnerabilities (Red Hat)
23 vulnerabilities.
-
fwupdateRed Hat GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim 6.4 Medium -
fwupdateRed Hat GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. 5.7 Medium -
fwupdateRed Hat GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. 6.4 Medium -
fwupdateRed Hat There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... 5.7 Medium -
fwupdateRed Hat There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... 5.7 Medium -
fwupdateRed Hat There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems... 6.7 Medium -
fwupdateRed Hat In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic... 6.4 Medium -
fwupdateRed Hat A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack... 8.2 High -
fwupdateRed Hat FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
fwupdateRed Hat FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
fwupdateRed Hat Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory... 6.5 Medium -
fwupdateRed Hat Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an... 6.5 Medium -
fwupdateRed Hat The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... 9.8 Critical -
fwupdateRed Hat An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1... 8.8 High -
fwupdateRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 6.5 Medium -
fwupdateRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 7.5 High -
fwupdateRed Hat The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote... 5.5 Medium -
fwupdateRed Hat An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before... 8.8 High -
fwupdateRed Hat There is a stack-based buffer over-read in calling GLib in the function... 6.5 Medium -
fwupdateRed Hat There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... 6.5 Medium -
fwupdateRed Hat There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in... 6.5 Medium -
fwupdateRed Hat An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11... 8.8 High -
fwupdateRed Hat An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment... 8.8 High