Skip to contentFedoraproject Fedora vulnerabilities
- oracle corporation java, canonical ubuntu linux, debian linux +7 more +9 moreVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions...CVE-2020-14562Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....CVE-2020-14556Fix available4.8 Medium
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreThe bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block...CVE-2020-13753Fix available10.0 Critical
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 moreevolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and...CVE-2020-14928Fix available5.9 Medium
- cli, npmjs npm, fedoraproject fedora +1 more +3 moreSensitive information exposure through logs in npm cliCVE-2020-15095Fix available4.4 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges...CVE-2020-15567Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor...CVE-2020-15564Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a...CVE-2020-15565Fix available8.8 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a...CVE-2020-15563Fix available6.5 Medium
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...CVE-2020-14303Fix available7.5 High
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via...CVE-2020-9498Fix available6.7 Medium
- apache guacamole, debian linux, fedoraproject fedora +2 moreApache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via...CVE-2020-9497Fix available4.4 Medium
- libraw, debian linux, fedoraproject fedora +2 moreLibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp...CVE-2020-15503Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11,...CVE-2020-10760Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the...CVE-2020-10745Fix available7.5 High
- debian linux, samba, fedoraproject fedora +2 more +4 moreA NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in...CVE-2020-10730Fix available6.5 Medium
- github cmark-gfm, github flavored markdown project flavored markdown, fedoraproject fedora +2 moreDenial of service in table parsing in cmark-gfmCVE-2020-5238Fix available6.5 Medium
- squid-cache squid, fedoraproject fedora, netapp cloud manager +2 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2020-14058Fix available7.5 High
- squid-cache squid, fedoraproject fedora +1 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2020-15049Fix available9.9 Critical
- ifax hylafax enterprise, fedoraproject fedora, hylafax\+ project hylafax\+ +2 more +4 moreIn HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in...CVE-2020-15396Fix available7.8 High
- libvncserver project libvncserver, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreIt was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode...CVE-2017-18922Fix available9.8 Critical
- mediaarea mediainfo, fedoraproject fedora +1 moreIn MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in...CVE-2020-15395Fix available7.8 High
- coturn, canonical ubuntu linux, debian linux +2 more +4 moreImproper Initialization in coturnCVE-2020-4067Fix available7.0 High
- putty, fedoraproject fedora, netapp oncommand unified manager core package +2 morePuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the...CVE-2020-14002Fix available5.9 Medium
- openexr, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid...CVE-2020-15304Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in...CVE-2020-15305Fix available5.5 Medium
- openexr, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a...CVE-2020-15306Fix available5.5 Medium
- python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds reads in PillowCVE-2020-10177Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-11538Fix available8.1 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds reads in PillowCVE-2020-10994Fix available5.5 Medium
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in PillowCVE-2020-10379Fix available7.8 High
- python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreOut-of-bounds read in PillowCVE-2020-10378Fix available5.5 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreimg_auth.php may leak private extension images into the public cacheCVE-2020-15005Fix available3.1 Low
- rubyonrails rails, fedoraproject fedora, rails https://github.com/rails/rails +2 moreUntrusted users can run pending migrations in production in RailsCVE-2020-8185Fix available6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in RLEDECOMPRESS in FreeRDPCVE-2020-4033Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger casting vulnerability in `update_recv_secondary_order` in FreeRDPCVE-2020-4032Fix available3.1 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreUse-After-Free in gdi_SelectObject in FreeRDPCVE-2020-4031Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in `TrioParse` in FreeRDPCVE-2020-4030Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB Read in license_read_new_or_upgrade_license_packet in FreeRDPCVE-2020-11099Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOut-of-bound read in glyph_cache_put in FreeRDPCVE-2020-11098Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreOOB read in ntlm_av_pair_get in FreeRDPCVE-2020-11097Public exploitFix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_read_cache_bitmap_v3_order in FreeRDPCVE-2020-11096Fix available3.5 Low
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreGlobal OOB read in update_recv_primary_order in FreeRDPCVE-2020-11095Fix available3.5 Low
- alpine project alpine, debian linux, fedoraproject fedora +2 moreAlpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in...CVE-2020-14929Fix available7.5 High
- mutt, neomutt, canonical ubuntu linux +3 more +5 moreMutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects...CVE-2020-14954Fix available5.9 Medium
- mozilla firefox, debian linux, fedoraproject fedora +1 more +3 moreDuring RSA key generation, bignum implementations used a variation of the Binary Extended...CVE-2020-12402Fix available4.4 Medium
- cisofy lynis, fedoraproject fedora +1 moreCISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The...CVE-2020-13882Fix available4.2 Medium
- cisofy lynis, debian linux, fedoraproject fedora +2 moreIn CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list...CVE-2019-13033Fix available3.3 Low
- Show moreLoading…