Skip to contentFedoraproject Fedora vulnerabilities
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...CVE-2020-35475Fix available7.5 High
- ceph, fedoraproject fedora, redhat ceph storage +2 more +4 moreUser credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,...CVE-2020-27781Fix available7.1 High
- x-stream xstream, apache struts, debian linux +1 more +3 moreServer-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258Public exploitFix availableEPSS 81.8%6.3 Medium
- x-stream xstream, apache struts, debian linux +1 more +3 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259Public exploitFix availableEPSS 82.4%6.8 Medium
- jsonparser project jsonparser, fedoraproject fedora +1 moreDenial of Service in jsonparserCVE-2020-35381Fix available7.5 High
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of...CVE-2020-29567Fix available6.2 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2194Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2022Fix available4.4 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read...CVE-2020-0499Fix available4.3 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A bounds check common to most operation time...CVE-2020-29571Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping...CVE-2020-29570Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When they require assistance from the device model...CVE-2020-29566Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored...CVE-2020-29486Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES...CVE-2020-29485Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client...CVE-2020-29484Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared...CVE-2020-29483Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute...CVE-2020-29482Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid....CVE-2020-29481Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any...CVE-2020-29480Fix available2.3 Low
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the...CVE-2020-29479Fix available8.8 High
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting...CVE-2020-35176Fix available5.3 Medium
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreMemory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...CVE-2020-26418Fix available3.1 Low
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreCrash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to...CVE-2020-26421Fix available4.2 Medium
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...CVE-2020-26420Fix available3.1 Low
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance kit +2 moreMemory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet...CVE-2020-26419Fix available3.1 Low
- phpldapadmin project phpldapadmin, fedoraproject fedora +1 moreAn XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store...CVE-2020-35132Fix available5.4 Medium
- jasper project jasper, fedoraproject fedora +1 moreThere's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to...CVE-2020-27828Fix available7.8 High
- sympa, debian linux, fedoraproject fedora +2 moreSympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any...CVE-2020-29668Fix available3.7 Low
- uclouvain openjpeg, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This...CVE-2020-27824Public exploitFix available5.5 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU...CVE-2020-16592Fix available5.5 Medium
- element-hq synapse, fedoraproject fedora +1 moreDenial of service attack via incorrect parameters to federation APIsCVE-2020-26257Fix available6.5 Medium
- debian linux, linux kernel, broadcom fabric operating system +8 more +10 moreA locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9...CVE-2020-29660Fix available4.4 Medium
- debian linux, linux kernel, broadcom fabric operating system +9 more +11 moreA locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers...CVE-2020-29661Public exploitFix available7.8 High
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- pytest py, fedoraproject fedora, oracle zfs storage appliance kit +2 morepy vulnerable to Regular Expression Denial of ServiceCVE-2020-29651Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x...CVE-2020-27823Fix available7.8 High
- apple icloud, ipados, itunes +9 more +11 moreA use after free issue was addressed with improved memory management. This issue is fixed in...CVE-2020-27918Fix available7.8 High
- imagemagick, fedoraproject fedora +1 moreIn WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory(...CVE-2020-25664Fix available6.1 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 moreGNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw...CVE-2020-29385Fix available5.5 Medium
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it...CVE-2020-29600Fix available9.8 Critical
- libpng pngcheck, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a...CVE-2020-27818Public exploitFix available3.3 Low
- gnu glibc, fedoraproject fedora, netapp e-series santricity os controller +3 more +5 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4...CVE-2020-29562Fix available4.8 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- audacityteam audacity, fedoraproject fedora +1 moreAudacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After...CVE-2020-11867Fix available3.3 Low
- containerd, debian linux, fedoraproject fedora +2 morecontainerd-shim API Exposed to Host Network ContainersCVE-2020-15257Public exploitFix available5.2 Medium
- libslirp project libslirp, debian linux, fedoraproject fedora +2 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2020-29129Fix available4.3 Medium
- libslirp project libslirp, debian linux, fedoraproject fedora +2 moreslirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain...CVE-2020-29130Fix available4.3 Medium
- lxml, debian linux, fedoraproject fedora +5 more +7 morelxml vulnerable to Cross-site ScriptingCVE-2020-27783Fix available6.1 Medium
- Show moreLoading…