Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6545Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6544Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote...CVE-2020-6543Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6542Fix available8.8 High
- lua, fedoraproject fedora +1 moreLua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection...CVE-2020-24342Fix available7.8 High
- trousers project trousers, fedoraproject fedora +1 moreAn issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root...CVE-2020-24330Fix available7.8 High
- trousers project trousers, fedoraproject fedora +1 moreAn issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root...CVE-2020-24331Fix available7.8 High
- trustedcomputinggroup trousers, fedoraproject fedora +1 moreAn issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root...CVE-2020-24332Fix available5.5 Medium
- wireshark, fedoraproject fedora, opensuse leap +1 more +3 moreIn Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan...CVE-2020-17498Fix available6.5 Medium
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1....CVE-2020-17507Fix available5.3 Medium
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service...CVE-2020-12674Fix available7.5 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth...CVE-2020-12673Fix available7.5 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote...CVE-2020-12100Fix available7.5 High
- radare radare2, fedoraproject fedora +1 moreradare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in...CVE-2020-17487Fix available7.5 High
- roundcube webmail, fedoraproject fedora +1 moreRoundcube Webmail before 1.4.8 allows stored XSS in HTML messages during message display via a...CVE-2020-16145Fix available6.1 Medium
- f2fs-tools project f2fs-tools, fedoraproject fedora +1 moreAn exploitable code execution vulnerability exists in the file system checking functionality of...CVE-2020-6070Fix available6.7 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- etcd-io etcd, fedoraproject fedora +1 moreImproper authentication in etcdCVE-2020-15136Fix available6.5 Medium
- etcd-io etcd, fedoraproject fedora +1 moreDenial of Service in etcdCVE-2020-15114Fix available7.7 High
- etcd-io etcd, fedoraproject fedora +1 moreNo minimum password length in etcdCVE-2020-15115Fix available5.8 Medium
- golang go, debian linux, fedoraproject fedora +1 more +3 moreWithdrawn Advisory: Infinite loop in xzCVE-2020-16845Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6541Fix availableEPSS 21.6%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreBuffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6540Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6539Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105...CVE-2020-6538Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute...CVE-2020-6537Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to...CVE-2020-6532Fix available8.8 High
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output...CVE-2020-17368Fix available9.8 Critical
- firejail project firejail, debian linux, fedoraproject fedora +1 more +3 moreFirejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,...CVE-2020-17367Fix available7.8 High
- etcd, fedoraproject fedora +1 moreImproper Preservation of Permissions in etcdCVE-2020-15113Fix available5.7 Medium
- etcd, fedoraproject fedora +1 moreImproper Input Validation in etcdCVE-2020-15112Fix available6.5 Medium
- etcd, fedoraproject fedora +1 moreImproper Input Validation in etcdCVE-2020-15106Fix available6.5 Medium
- lilypond, debian linux, fedoraproject fedora +2 more +4 morescm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when ...CVE-2020-17353Fix available9.8 Critical
- the x11 project libx11, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM)...CVE-2020-14344Fix available6.7 Medium
- radare radare2, fedoraproject fedora +1 moreradare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in...CVE-2020-16269Fix available5.5 Medium
- dnsmasq, fedoraproject fedora +1 moreA flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior...CVE-2020-14312Fix available5.9 Medium
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the...CVE-2020-16116Fix available3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain...CVE-2020-16166Fix available3.7 Low
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.CVE-2020-16135Fix available5.9 Medium
- claws-mail, fedoraproject fedora +1 moreIn imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger...CVE-2020-16094Fix available7.5 High
- trusteddomain opendmarc, debian linux, fedoraproject fedora +2 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 has improper null termination in the...CVE-2020-12460Fix available9.8 Critical
- libetpan project libetpan, debian linux, fedoraproject fedora +1 more +3 moreLibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS...CVE-2020-15953Fix available7.4 High
- freerdp, canonical ubuntu linux, debian linux +2 more +4 moreInteger Overflow in FreeRDPCVE-2020-15103Fix available3.5 Low
- claws-mail, fedoraproject fedora, opensuse backports sle +1 more +3 morecommon/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after...CVE-2020-15917Fix available9.8 Critical
- radare radare2, fedoraproject fedora +1 moreCommand injection in Radare2CVE-2020-15121Fix available7.4 High
- cisco clamav, canonical ubuntu linux, debian linux +1 more +3 moreClam AntiVirus (ClamAV) Software Null Pointer Dereference VulnerabilityCVE-2020-3481Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker...CVE-2020-6536Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote...CVE-2020-6535Fix available6.1 Medium
- Show moreLoading…