Skip to contentFedoraproject Fedora vulnerabilities
- gnu gnutls, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference...CVE-2020-24659Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreCVE-2020-14386 does not affect BellSoft softwareCVE-2020-14386Public exploitFix available6.7 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- cryptsetup project cryptsetup, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2...CVE-2020-14382Fix available7.8 High
- sensiolabs httpclient, symfony, fedoraproject fedora +2 moreRCE in SymfonyCVE-2020-15094Fix available8.0 High
- golang go, fedoraproject fedora, opensuse leap +1 more +3 moreGo before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI...CVE-2020-24553Fix available6.1 Medium
- arm mbed tls, debian linux, fedoraproject fedora +2 moreA Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...CVE-2020-16150Fix available5.5 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24584Fix available7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreDjango Incorrect Default PermissionsCVE-2020-24583Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6571Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInformation leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to...CVE-2020-6570Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who...CVE-2020-6569Fix available6.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6568Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in command line handling in Google Chrome on Windows...CVE-2020-6567Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6566Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a...CVE-2020-6565Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6564Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183...CVE-2020-6563Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6562Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83...CVE-2020-6561Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a...CVE-2020-6560Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote...CVE-2020-6559Fix available8.8 High
- microsoft librepo, fedoraproject fedora, opensuse backports sle +1 more +3 moreA flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was...CVE-2020-14352Fix available8.0 High
- kleopatra project kleopatra, fedoraproject fedora, opensuse backports sle +1 more +3 moreThe Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to...CVE-2020-24972Public exploitFix available8.8 High
- kde ark, canonical ubuntu linux, debian linux +2 more +4 moreIn KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the...CVE-2020-24654Fix available3.3 Low
- gnome geary, fedoraproject fedora +1 moreGNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP...CVE-2020-24661Fix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote...CVE-2020-6556Fix available8.8 High
- fossil-scm fossil, fedoraproject fedora, opensuse backports sle +1 more +3 moreFossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated...CVE-2020-24614Fix available8.8 High
- the x11 project libx11, fedoraproject fedora +1 moreAn integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows...CVE-2020-14363Fix available7.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2020-24606Fix available8.6 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...CVE-2020-14364Public exploitFix available5.0 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15811Fix available6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security updateCVE-2020-15810Fix available6.5 Medium
- chrony, canonical ubuntu linux, fedoraproject fedora +2 moreA flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run...CVE-2020-14367Fix available6.0 Medium
- isc bind, canonical ubuntu linux, debian linux +4 more +6 moreupdate-policy rules of type "subdomain" are enforced incorrectlyCVE-2020-8624Fix available4.3 Medium
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cCVE-2020-8623Fix available7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failureCVE-2020-8622Fix available6.5 Medium
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +7 more +9 moreASP.NET Core Denial of Service VulnerabilityCVE-2020-1597Fix available7.5 High
- microsoft netlogon, canonical ubuntu linux, debian linux +24 more +26 moreNetlogon Elevation of Privilege VulnerabilityCVE-2020-1472In KEVPublic exploitFix availableEPSS 99.4%5.5 Medium
- lua, debian linux, fedoraproject fedora +2 moreldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal,...CVE-2020-24370Public exploitFix available5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6555Fix available7.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6554Fix available8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote...CVE-2020-6553Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6552Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6551Fix availableEPSS 27.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6550Fix availableEPSS 27.5%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to...CVE-2020-6549Fix availableEPSS 27.5%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker...CVE-2020-6548Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker...CVE-2020-6547Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local...CVE-2020-6546Fix available7.8 High
- Show moreLoading…