Skip to contentFedoraproject Fedora vulnerabilities
- x11vnc project x11vnc, debian linux, fedoraproject fedora +2 morescan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other...CVE-2020-29074Fix available8.8 High
- musl-libc musl, debian linux, fedoraproject fedora +1 more +3 moreIn musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...CVE-2020-28928Fix available5.5 Medium
- matrix synapse, fedoraproject fedora +1 moreDenial of service attack due to invalid JSONCVE-2020-26890Fix available7.5 High
- cimg, fedoraproject fedora +1 moreA flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer...CVE-2020-25693Fix available8.1 High
- webkit, webkitgtk, fedoraproject fedora +2 moreAn exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A...CVE-2020-13584Fix available8.8 High
- debian linux, fedoraproject fedora, librdf raptor rdf syntax library +2 moreA malformed input file can lead to a segfault due to an out of bounds array access in...CVE-2020-25713Fix available6.5 Medium
- glyph & cog xpdf, fedoraproject fedora +1 moreIn Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to...CVE-2020-25725Fix available5.0 Medium
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 morePDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in...CVE-2020-20740Fix available7.8 High
- libvips, debian linux, fedoraproject fedora +2 moreim_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an...CVE-2020-20739Fix available5.3 Medium
- ceph, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...CVE-2020-25660Fix available8.8 High
- ibm aix, vios, fedoraproject fedora +3 more +5 moreIBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive...CVE-2020-4788Fix available5.1 Medium
- rclone, fedoraproject fedora +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator in RcloneCVE-2020-28924Fix available7.5 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDeserialization of Untrusted Data in Archive_TarCVE-2020-28948Public exploitFix availableEPSS 47.5%7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreMultiple vulnerabilities through filename manipulation in Archive_TarCVE-2020-28949In KEVPublic exploitFix availableEPSS 84.6%7.8 High
- moodle, fedoraproject fedora +1 moreSQL Injection in moodleCVE-2020-25700Fix available6.5 Medium
- moodle, fedoraproject fedora +1 moreCross-site Scripting (XSS) in moodleCVE-2020-25702Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in MoodleCVE-2020-25703Fix available5.3 Medium
- moodle, fedoraproject fedora +1 morePrivilage Escalation in moodleCVE-2020-25701Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreImproper Access Control in moodleCVE-2020-25698Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through...CVE-2020-28941Fix available5.5 Medium
- nodejs node, node.js, c-ares project c-ares +6 more +8 moreUncontrolled Resource Consumption in nodeCVE-2020-8277Public exploitFix availableEPSS 54.2%7.5 High
- moodle, fedoraproject fedora +1 morePrivilage Escalation in moodleCVE-2020-25699Fix available7.5 High
- drupal, drupal core, fedoraproject fedora +2 moreDrupal core Unrestricted Upload of File with Dangerous TypeCVE-2020-13671In KEVPublic exploitFix availableEPSS 32.6%8.8 High
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.CVE-2020-28362Fix available7.5 High
- go toolchain cmd/cgo, cmd/go, golang go +3 more +5 moreArbitrary code execution in go command with cgo in cmd/go and cmd/cgoCVE-2020-28366Fix available7.5 High
- fedoraproject fedora, tpm2 software stack project software stack +1 moreMissing initialization of a variable in the TPM2 source may allow a privileged user to...CVE-2020-24455Fix available6.7 Medium
- openldap, debian linux, fedoraproject fedora +7 more +9 moreA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...CVE-2020-25710Fix available7.5 High
- python-rsa project python-rsa, fedoraproject fedora, redhat openstack platform +2 moreTiming attacks in python-rsaCVE-2020-25658Fix available7.5 High
- xen, debian linux, fedoraproject fedora +2 moreXen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES...CVE-2020-28368Fix available4.4 Medium
- debian linux, fedoraproject fedora, intel microcode +14 more +16 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-8698Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel microcode +4 more +6 moreImproper removal of sensitive information before storage or transfer in some Intel(R) Processors...CVE-2020-8696Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel celeron 3855u firmware +298 more +300 moreObservable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged...CVE-2020-8695Fix available5.5 Medium
- librdf raptor rdf syntax library, debian linux, fedoraproject fedora +2 moreraptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15...CVE-2017-18926Fix available7.1 High
- linuxfoundation nats-server, fedoraproject fedora +1 moreIncorrect handling of credential expiry by /nats-io/nats-serverCVE-2020-26892Fix available9.8 Critical
- linuxfoundation nats-server, fedoraproject fedora +1 moreNil dereference in NATS JWT, DoS of nats-serverCVE-2020-26521Fix available7.5 High
- mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 moreMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...CVE-2020-28196Fix available7.5 High
- asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 moreAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...CVE-2020-28242Fix available6.5 Medium
- maxmind libmaxminddb, debian linux, fedoraproject fedora +2 morelibmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.CVE-2020-28241Fix available6.5 Medium
- tcpdump, apple mac os x, macos +2 more +4 moreppp decapsulator can be convinced to allocate a large amount of memoryCVE-2020-8037Fix available7.5 High
- saltstack salt, debian linux, fedoraproject fedora +1 more +3 moreSaltStack Salt Command Injection in netapi ssh clientCVE-2020-16846In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- sddm project sddm, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that -...CVE-2020-28049Fix available6.3 Medium
- google chrome, cefsharp, debian linux +6 more +8 moreInappropriate implementation in V8CVE-2020-16009In KEVFix availableEPSS 48.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreStack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker...CVE-2020-16008Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16006Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16005Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote...CVE-2020-16004Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to...CVE-2020-15995Fix available8.8 High
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA race condition vulnerability was found in the way the spice-vdagentd daemon handled new client...CVE-2020-25653Fix available6.3 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the spice-vdagentd daemon, where it did not properly handle client...CVE-2020-25652Fix available5.5 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the SPICE file transfer protocol. File data from the host system can end up...CVE-2020-25651Fix available6.4 Medium
- Show moreLoading…