Fedoraproject Extra Packages For Enterprise Linux vulnerabilities

• rpm-software-management mock, fedora extra packages for enterprise linux, fedora +1 more +3 more Mock: privilege escalation for users that can access mock configuration CVE-2023-6395 Fix available 6.7 MediumJanuary 16, 2024
• sqlite, fedoraproject extra packages for enterprise linux, fedora +9 more +11 more Sqlite: use-after-free bug in jsonparseaddnodearray CVE-2024-0232 Fix available 4.7 MediumJanuary 12, 2024
• exim, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 more Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a... CVE-2023-51766 Fix available 5.3 MediumDecember 24, 2023
• tats w3m, fedora extra packages for enterprise linux, fedora +2 more W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) CVE-2023-4255 Fix available 5.5 MediumDecember 21, 2023
• broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 more Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c CVE-2023-4256 Fix available 5.5 MediumDecember 21, 2023
• redhat ansible, fedoraproject extra packages for enterprise linux, fedora +6 more +8 more Ansible: template injection CVE-2023-5764 Fix available 7.1 HighDecember 12, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: duplicating a bigbluebutton activity assigns the same meeting id CVE-2023-5543 Fix available 3.3 LowNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: forum summary report shows students from other groups when in separate groups mode CVE-2023-5551 Fix available 3.3 LowNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: rce due to lfi risk in some misconfigured shared hosting environments CVE-2023-5550 Fix available 6.5 MediumNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: insufficient capability checks when updating the parent of a course category CVE-2023-5549 Fix available 3.3 LowNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: cache poisoning risk with endpoint revision numbers CVE-2023-5548 Fix available 3.3 LowNovember 9, 2023
• moodle h5p, moodle, fedoraproject extra packages for enterprise linux +1 more +3 more Moodle: auto-populated h5p author name causes a potential information leak CVE-2023-5545 Fix available 3.3 LowNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: students can view other users in "only see own membership" groups CVE-2023-5542 Fix available 3.3 LowNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: authenticated remote code execution risk in imscp CVE-2023-5540 Fix available 4.7 MediumNovember 9, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: authenticated remote code execution risk in lesson CVE-2023-5539 Fix available 4.7 MediumNovember 9, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 more Imagemagick: heap use-after-free in coders/bmp.c CVE-2023-5341 Fix available 6.2 MediumOctober 9, 2023
• tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 more W3m: out of bounds read in growbuf_to_str() at w3m/indep.c CVE-2023-38253 Fix available 4.7 MediumJuly 14, 2023
• tats w3m, fedoraproject extra packages for enterprise linux, fedora +2 more +4 more W3m: out of bounds read in strnew_size() at w3m/str.c CVE-2023-38252 Fix available 4.7 MediumJuly 14, 2023
• fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 more Heap-buffer-overflow in src/formats_i.c CVE-2023-34432 Fix available 7.8 HighJuly 10, 2023
• fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 more Heap-buffer-overflow in src/hcom.c CVE-2023-34318 Fix available 7.8 HighJuly 10, 2023
• fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 more Floating point exception in src/voc.c CVE-2023-32627 Fix available 6.2 MediumJuly 10, 2023
• fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 more Floating point exception in src/aiff.c CVE-2023-26590 Fix available 6.2 MediumJuly 10, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 more Imagemagick: heap-buffer-overflow in coders/tiff.c CVE-2023-3428 Fix available 6.2 MediumJune 29, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in... CVE-2023-34475 Fix available 5.5 MediumJune 16, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function... CVE-2023-34474 Fix available 5.5 MediumJune 16, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an... CVE-2023-3195 Fix available 5.5 MediumJune 16, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 more A vulnerability was found in ImageMagick. This security flaw causes a shell command injection... CVE-2023-34153 Fix available 7.8 HighMay 30, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 more A vulnerability was found in ImageMagick. This security flaw cause a remote code execution... CVE-2023-34152 Public exploitFix available 9.8 CriticalMay 30, 2023
• imagemagick, debian linux, fedoraproject extra packages for enterprise linux +2 more +4 more A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of... CVE-2023-34151 Fix available 5.5 MediumMay 30, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: minor sql injection risk in external wiki method for listing pages CVE-2023-30944 Fix available 5.6 MediumMay 2, 2023
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle: tinymce loaders susceptible to arbitrary folder creation CVE-2023-30943 Public exploitFix available 6.5 MediumMay 2, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum()... CVE-2023-1906 Fix available 5.5 MediumApril 12, 2023
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 more Duplicate Advisory: ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS CVE-2023-1289 Fix available 5.5 MediumMarch 23, 2023
• haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 more An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash... CVE-2023-0056 Fix available 6.5 MediumJanuary 18, 2023
• kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 more Cri-o: /etc/passwd tampering privesc CVE-2022-4318 Fix available 7.8 HighDecember 29, 2022
• rxvt-unicode project rxvt-unicode, fedoraproject extra packages for enterprise linux, fedora +2 more The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background... CVE-2022-4170 Fix available 9.8 CriticalDecember 9, 2022
• qemu, fedoraproject extra packages for enterprise linux, fedora +1 more +3 more An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The... CVE-2022-4144 Fix available 6.5 MediumNovember 29, 2022
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library CVE-2022-45152 Fix available 9.1 CriticalNovember 25, 2022
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle No groups filtering in H5P activity attempts report CVE-2022-40316 Fix available 4.3 MediumSeptember 30, 2022
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle Minor SQL injection risk in admin user browsing CVE-2022-40315 Fix available 9.8 CriticalSeptember 30, 2022
• moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle Stored Cross-site Scripting and page denial of service CVE-2022-40313 Fix available 7.1 HighSeptember 30, 2022
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed... CVE-2022-3213 Fix available 5.5 MediumSeptember 19, 2022
• libmodbus, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 more A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. CVE-2022-0367 Fix available 7.8 HighAugust 29, 2022
• qemu, fedoraproject extra packages for enterprise linux, fedora +2 more +4 more An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the... CVE-2020-14394 Fix available 3.2 LowAugust 17, 2022
• imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was... CVE-2022-2719 Fix available 5.5 MediumAugust 9, 2022
• google chrome, fedoraproject extra packages for enterprise linux, fedora +2 more Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a... CVE-2022-2296 Fix available 8.8 HighJuly 11, 2022
• google chrome, fedoraproject extra packages for enterprise linux, fedora +2 more Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to... CVE-2022-2295 Fix available 8.8 HighJuly 11, 2022
• google chrome, webrtc, apple ipados +9 more +11 more Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker... CVE-2022-2294 In KEVFix available EPSS 70.8% 8.8 HighJuly 11, 2022
• google chrome, fedoraproject extra packages for enterprise linux, fedora +2 more Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an... CVE-2022-2163 Fix available 8.8 HighJune 22, 2022
• google chrome, fedoraproject extra packages for enterprise linux, fedora +2 more Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to... CVE-2022-2158 Fix available 8.8 HighJune 22, 2022
• Show olderLoading…