Skip to contentFedora vulnerabilities
Newest
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerabilityCVE-2023-4155Fix available5.3 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreOut-of-bounds read information disclosure vulnerabilityCVE-2023-4135Fix available6.0 Medium
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()CVE-2023-3180Fix available6.0 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection null pointer dereference denial-of-service vulnerabilityCVE-2023-32248Fix available7.5 High
- linux kernel, fedora, netapp h300s +7 more +9 moreSession race condition remote code execution vulnerabilityCVE-2023-32258Fix available8.1 High
- linux kernel, fedora, netapp h300s +8 more +10 moreSession race condition remote code execution vulnerabilityCVE-2023-32257Fix available8.1 High
- linux kernel, fedora, netapp h300s firmware +8 more +10 moreSession null pointer dereference denial-of-service vulnerabilityCVE-2023-32252Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file writeCVE-2023-13863.3 Low
- linux kernel, fedora, netapp h300s +7 more +9 moreSession setup memory exhaustion denial-of-service vulnerabilityCVE-2023-32247Fix available7.5 High
- frrouting, fedora, red hat enterprise linux 8 +1 more +3 moreInifinite loop in babld message parsing may cause dosCVE-2023-3748Fix available3.5 Low
- debian linux, linux kernel, fedora +4 more +6 moreUse-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.cCVE-2023-3863Fix available6.4 Medium
- fedora extra packages for enterprise linux 7, fedora, libssh +3 more +5 moreProcessing sftp server read may cause null dereferenceCVE-2023-36033.1 Low
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossibility of deadlock in libbpf function sock_hash_delete_elemCVE-2023-0160Fix available4.7 Medium
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.cCVE-2023-38253Fix available4.7 Medium
- libtiff, debian linux, fedora +5 more +7 moreSegmentation fault in fax3encode in libtiff/tif_fax3.cCVE-2023-3618Fix available6.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.cCVE-2023-34432Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.cCVE-2023-34318Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.cCVE-2023-32627Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.cCVE-2023-26590Fix available6.2 Medium
- tang project tang, fedora, red hat enterprise linux 7 +3 more +5 moreRace condition exists in the key generation and rotation functionalityCVE-2023-1672Fix available5.3 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalCVE-2023-3269Public exploitFix available7.8 High
- debian linux, linux kernel, fedora +6 more +8 moreCrash due to a null pointer dereference in the dn_nsp_send functionCVE-2023-3338Public exploitFix available6.5 Medium
- libtiff, fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: null pointer dereference in tif_dir.cCVE-2023-2908Fix available5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreOut-of-bounds read when setting hmac dataCVE-2023-2860Fix available4.4 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreNull pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.cCVE-2023-3355Fix available4.7 Medium
- libreoffice, fedora, red hat enterprise linux 6 +4 more +6 moreArbitrary file writeCVE-2023-1183Fix availableEPSS 64.9%5.0 Medium
- gnome glib, fedora extra packages for enterprise linux, fedora +9 more +11 moreGvariant deserialisation does not match spec for non-normal dataCVE-2023-32665Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreG_variant_byteswap() can take a long time with some non-normal inputsCVE-2023-32611Fix available5.5 Medium
- gnome glib, fedora extra packages for enterprise linux, 37 +8 more +10 moreGvariant offset table entry size is not checked in is_normal()CVE-2023-29499Fix available5.5 Medium
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection race condition remote code execution vulnerabilityCVE-2023-32254Fix available9.8 Critical
- linux kernel, fedora, netapp h300s +9 more +11 moreSession race condition remote code execution vulnerabilityCVE-2023-32250Fix available9.0 Critical
- php, fedora, red hat enterprise linux 6 +5 more +7 morePotential buffer overflow in php_cli_server_startup_workersCVE-2022-4900Fix available6.2 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`CVE-2023-25588Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreField `file_table` of `struct module *module` is uninitializedCVE-2023-25585Fix available4.7 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreOut of bounds read in parse_module function in bfd/vms-alpha.cCVE-2023-25584Fix available6.3 Medium
- fedora dhcp, fedoraproject fedora, redhat enterprise linux +5 more +7 moreDHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a...CVE-2018-1111Public exploitFix availableEPSS 97.9%7.5 High
- dovecot, fedora dovecot22, opensuse leap +2 more +4 moreA postinstall script in the dovecot rpm allows local users to read the contents of newly created...CVE-2016-4983Fix available3.3 Low
- fedora pacemaker configuration systemThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set...CVE-2015-39834.3 Medium
- fedora pacemaker configuration system, redhat enterprise linux high availability, enterprise linux high availability eus +2 more +4 moreThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an...CVE-2015-18486.8 Medium
- apache mod fcgid, fedora, red hat enterprise linux 7 +2 more +4 moreHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cCVE-2010-3872Fix available7.5 High
- fedora directory serverMultiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and...CVE-2008-32837.8 High
- fedora directory serverRed Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server...CVE-2008-2930Public exploit7.1 High
- fedora directory serverMultiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory...CVE-2008-2929Fix available4.3 Medium
- fedora newsxStack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows...CVE-2008-3252Fix available10.0 High