Fedora vulnerabilities

Products

• Fedora 83
• Extra Packages For Enterprise Linux 20
• 37 7
• Extra Packages For Enterprise Linux 7 5
• Extra Packages For Enterprise Linux 8 4
• 36 4
• Directory Server 3
• Dnf5daemon-server 3
• 38 3
• Pacemaker Configuration System 2

Newest

• fedora, red hat enterprise linux 10, enterprise linux 9 +2 more xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Fix available 8.7 HighSeptember 28, 2026
• fedora, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more PackageKit: dnf5 backend ignores SIMULATE on RepoRemove CVE-2026-19816 Fix available 7.1 HighSeptember 14, 2026
• fedora extra packages for enterprise linux (epel), fedora +1 more NetworkManager-l2tp: local privilege escalation via ipsec.conf injection CVE-2026-19624 Fix available 7.8 HighSeptember 14, 2026
• fedora linux, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Kernel: secure boot does not automatically enable kernel lockdown CVE-2025-1272 Fix available 7.7 HighFebruary 15, 2025
• fedora dnf5daemon-server Incomplete fix for CVE-2024-1929 CVE-2024-2746 Fix available 8.8 HighMay 8, 2024
• fedora dnf5daemon-server, rpm dnf5 +1 more Local Root Exploit via Configuration Dictionary CVE-2024-1929 Fix available 7.5 HighMay 8, 2024
• fedora dnf5daemon-server, rpm-software-management dnf5 +1 more No Limit on Number of Open Sessions / Bad Session Close Behaviour CVE-2024-1930 Fix available 6.5 MediumMay 8, 2024
• ofono project ofono, fedora +1 more Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function CVE-2023-4235 Fix available 8.1 HighApril 17, 2024
• linux ofono, fedora +1 more Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function CVE-2023-4234 Fix available 8.1 HighApril 17, 2024
• ofono project ofono, fedora +1 more Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function CVE-2023-4233 Fix available 8.1 HighApril 17, 2024
• ofono project ofono, fedora +1 more Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function CVE-2023-4232 Fix available 8.1 HighApril 17, 2024
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu CVE-2024-1312 Fix available 5.1 MediumFebruary 8, 2024
• fedora, openvswitch, rdo openstack rdo +5 more +7 more Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet CVE-2023-3966 Fix available 7.5 HighFebruary 8, 2024
• yarnpkg yarn, fedora extra packages for enterprise linux, fedora +2 more Yarn: untrusted search path CVE-2021-4435 Fix available 7.7 HighFebruary 4, 2024
• latchset pkcs11-provider, fedora +1 more Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths CVE-2023-6258 Fix available 8.1 HighJanuary 30, 2024
• gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 more Glibc: integer overflow in __vsyslog_internal() CVE-2023-6780 Fix available 5.3 MediumJanuary 30, 2024
• gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 more Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() CVE-2023-6779 Fix available 8.2 HighJanuary 30, 2024
• gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 more Glibc: heap-based buffer overflow in __vsyslog_internal() CVE-2023-6246 Public exploitFix available 8.4 HighJanuary 30, 2024
• linux kernel, fedora, red hat enterprise linux 6 +4 more +6 more Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability CVE-2023-6200 Fix available 7.5 HighJanuary 28, 2024
• rpm-software-management mock, fedora extra packages for enterprise linux, fedora +1 more +3 more Mock: privilege escalation for users that can access mock configuration CVE-2023-6395 Fix available 6.7 MediumJanuary 16, 2024
• sudo project sudo, fedora, red hat enterprise linux 6 +3 more +5 more Sudo: improper handling of ipa_hostname leads to privilege mismanagement CVE-2023-7090 Fix available 6.6 MediumDecember 23, 2023
• tats w3m, fedora extra packages for enterprise linux, fedora +2 more W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) CVE-2023-4255 Fix available 5.5 MediumDecember 21, 2023
• broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 more Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c CVE-2023-4256 Fix available 5.5 MediumDecember 21, 2023
• openimageio, fedora extra packages for enterprise linux, fedora +2 more Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp CVE-2023-3430 Fix available 7.5 HighDecember 18, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: io_uring out of boundary memory access in __io_uaddr_map() CVE-2023-6560 Fix available 5.5 MediumDecember 7, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c CVE-2023-5972 Fix available 7.0 HighNovember 23, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: nvme: memory corruption via unprivileged user passthrough CVE-2023-6238 Fix available 6.7 MediumNovember 21, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect CVE-2023-6039 Fix available 5.5 MediumNovember 9, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Use-after-free in parse_lease_state() CVE-2023-1194 Fix available 7.1 HighNovember 3, 2023
• libtiff, fedora, red hat enterprise linux 6 +4 more +6 more Heap-buffer-overflow in extractimagesection() CVE-2023-3164 Fix available 5.5 MediumNovember 2, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Use-after-free in setup_async_work() CVE-2023-1193 Fix available 6.5 MediumNovember 1, 2023
• fedora, red hat 3scale api management platform 2, rmagick +2 more Draw while calling getdrawinfo() CVE-2023-5349 Fix available 5.3 MediumOctober 22, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_alternative_host_name CVE-2023-38473 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_escape_label CVE-2023-38470 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_rdata_parse CVE-2023-38472 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in dbus_set_host_name CVE-2023-38471 Fix available 6.2 MediumOctober 18, 2023
• avahi, fedora, red hat enterprise linux 6 +4 more +6 more Reachable assertion in avahi_dns_packet_append_record CVE-2023-38469 Fix available 6.2 MediumOctober 18, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access CVE-2023-42752 Fix available 5.5 MediumOctober 13, 2023
• samba, fedora, red hat enterprise linux 6 +4 more +6 more Samba: ad dc password exposure to privileged users and rodcs CVE-2023-4154 Fix available 7.5 HighOctober 10, 2023
• openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 more Openvswitch don't match packets on nd_target field CVE-2023-5366 Fix available 7.1 HighOctober 6, 2023
• linux kernel, fedora, red hat enterprise linux 6 +4 more +6 more Use-after-free in smb2_is_status_io_timeout() CVE-2023-1192 Fix available 6.5 MediumOctober 5, 2023
• dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 more Memory leak on tls connections CVE-2022-4132 Fix available 5.9 MediumOctober 4, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c CVE-2023-5158 Fix available 6.5 MediumSeptember 25, 2023
• ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 more Service monitor mac flow is not rate limited CVE-2023-3153 Fix available 5.3 MediumSeptember 20, 2023
• gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 more Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized CVE-2023-25586 Fix available 4.7 MediumSeptember 14, 2023
• qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 more Dma reentrancy issue (incomplete fix for cve-2021-3750) CVE-2023-2680 Fix available 7.5 HighSeptember 13, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Use after free race between mbind() and vma-locked page fault CVE-2023-4611 Fix available 7.0 HighAugust 29, 2023
• debian linux, linux kernel, fedora +5 more +7 more Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c CVE-2023-4569 Fix available 5.5 MediumAugust 28, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Memory leak in btrfs_get_dev_args_from_path() CVE-2023-4394 Fix available 6.7 MediumAugust 17, 2023
• linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Kernel: btrfs: double free in btrfs_get_root_ref() CVE-2023-4389 Fix available 7.0 HighAugust 16, 2023
• Show olderLoading…