Skip to contentFedora Extra Packages For Enterprise Linux vulnerabilities
- fedora extra packages for enterprise linux (epel), fedora +1 moreNetworkManager-l2tp: local privilege escalation via ipsec.conf injectionCVE-2026-19624Fix available7.8 High
- yarnpkg yarn, fedora extra packages for enterprise linux, fedora +2 moreYarn: untrusted search pathCVE-2021-4435Fix available7.7 High
- rpm-software-management mock, fedora extra packages for enterprise linux, fedora +1 more +3 moreMock: privilege escalation for users that can access mock configurationCVE-2023-6395Fix available6.7 Medium
- tats w3m, fedora extra packages for enterprise linux, fedora +2 moreW3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)CVE-2023-4255Fix available5.5 Medium
- broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 moreTcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.cCVE-2023-4256Fix available5.5 Medium
- openimageio, fedora extra packages for enterprise linux, fedora +2 moreOpenimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppCVE-2023-3430Fix available7.5 High
- dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 moreMemory leak on tls connectionsCVE-2022-4132Fix available5.9 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreLocal variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitializedCVE-2023-25586Fix available4.7 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)CVE-2023-2680Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreOut-of-bounds read information disclosure vulnerabilityCVE-2023-4135Fix available6.0 Medium
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()CVE-2023-3180Fix available6.0 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file writeCVE-2023-13863.3 Low
- fedora extra packages for enterprise linux 7, fedora, libssh +3 more +5 moreProcessing sftp server read may cause null dereferenceCVE-2023-36033.1 Low
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.cCVE-2023-38253Fix available4.7 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.cCVE-2023-34432Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.cCVE-2023-34318Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.cCVE-2023-32627Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.cCVE-2023-26590Fix available6.2 Medium
- gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 moreGvariant deserialisation does not match spec for non-normal dataCVE-2023-32665Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreG_variant_byteswap() can take a long time with some non-normal inputsCVE-2023-32611Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreGvariant offset table entry size is not checked in is_normal()CVE-2023-29499Fix available5.5 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`CVE-2023-25588Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `file_table` of `struct module *module` is uninitializedCVE-2023-25585Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreOut of bounds read in parse_module function in bfd/vms-alpha.cCVE-2023-25584Fix available6.3 Medium