Skip to contentFedoraproject Fedora vulnerabilities
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.CVE-2020-12663Fix available7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...CVE-2020-12662Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617Public exploitFix availableEPSS 93.3%7.5 High
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct...CVE-2020-10726Fix available6.0 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a...CVE-2020-10725Fix available7.7 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +1 more +3 moreA vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is...CVE-2020-10724Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an...CVE-2020-10723Fix available5.1 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...CVE-2020-10722Fix available5.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...CVE-2020-12888Fix available5.3 Medium
- transmissionbt transmission, debian linux, fedoraproject fedora +2 moreUse-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers...CVE-2018-10756Fix available7.8 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV PDF Parsing Denial of Service VulnerabilityCVE-2020-3341Fix available7.5 High
- cisco clam antivirus, clamav, canonical ubuntu linux +2 more +4 moreClamAV ARJ Archive Parsing Denial of Service VulnerabilityCVE-2020-3327Fix available7.5 High
- debian apt, canonical ubuntu linux, debian linux +1 more +3 moreMissing input validation in the ar/tar implementations of APT before version 2.1.2 could result...CVE-2020-3810Fix available5.5 Medium
- infradead openconnect, debian linux, fedoraproject fedora +1 more +3 moreOpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or...CVE-2020-12823Fix available9.8 Critical
- rubyonrails active resource, fedoraproject fedora +1 moreInformation disclosure issue in Active ResourceCVE-2020-8151Fix available7.5 High
- fedoraproject fedora, nextcloud group folders +1 moreImproper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when...CVE-2020-81538.1 High
- nextcloud mail, fedoraproject fedora +1 moreA missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.CVE-2020-81567.0 High
- apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 moreXML External Entity attack in log4netCVE-2018-1285Public exploitFix availableEPSS 17.8%9.8 Critical
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.CVE-2020-11866Fix available7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.CVE-2020-11865Fix available7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).CVE-2020-11864Fix available5.5 Medium
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).CVE-2020-11863Fix available5.5 Medium
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA...CVE-2020-12783Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...CVE-2020-12770Fix available6.7 Medium
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...CVE-2020-12762Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation....CVE-2020-12740Fix available9.1 Critical
- qutebrowser, fedoraproject fedora +1 moreIncorrect Provision of Specified Functionality in qutebrowserCVE-2020-11054Fix available3.5 Low
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.CVE-2020-12108Fix available6.5 Medium
- glpi-project glpi, fedoraproject fedora +1 moreweak CSRF tokens in GLPICVE-2020-110357.5 High
- glpi-project glpi, fedoraproject fedora +1 moreAble to read any token through API user endpoint in GLPICVE-2020-110336.6 Medium
- go-macaron macaron, fedoraproject fedora +1 moregopkg.in/macaron.v1 Open Redirect vulnerabilityCVE-2020-12666Fix available6.1 Medium
- sqliteodbc project sqliteodbc, fedoraproject fedora, opensuse backports sle +2 moreSQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition...CVE-2020-12050Fix available7.0 High
- grafana, fedoraproject fedora, redhat ceph storage +1 more +3 moreGrafana information disclosureCVE-2020-12458Fix available5.5 Medium
- grafana, fedoraproject fedora +1 moreGrafana world readable configuration filesCVE-2020-12459Fix available5.5 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreIn the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a...CVE-2020-11884Fix available7.0 High
- red hat samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba...CVE-2020-10704Fix available7.5 High
- red hat samba, fedoraproject fedora, opensuse leap +2 moreA use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results'...CVE-2020-10700Fix available5.3 Medium
- openvpn, debian linux, fedoraproject fedora +2 moreAn issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ...CVE-2020-11810Fix available3.7 Low
- wisc htcondor, debian linux, fedoraproject fedora +2 moreHTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect...CVE-2019-18823Fix available9.8 Critical
- pypolicyd-spf project pypolicyd-spf, trusteddomain opendmarc, fedoraproject fedora +2 moreOpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass...CVE-2019-20790Fix available9.8 Critical
- trusteddomain opendmarc, fedoraproject fedora +1 moreOpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide...CVE-2020-12272Fix available5.3 Medium
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...CVE-2020-12137Fix available6.1 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest...CVE-2020-11945Fix availableEPSS 27.2%9.8 Critical
- libslirp project libslirp, canonical ubuntu linux, debian linux +2 more +4 morelibslirp: use after free vulnerability cause a denial of service.CVE-2020-1983Fix available7.5 High
- teeworlds, canonical ubuntu linux, debian linux +3 more +5 moreCServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote...CVE-2020-12066Fix available7.5 High
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- Show moreLoading…