Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21165Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72...CVE-2021-21164Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed...CVE-2021-21163Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to...CVE-2021-21162Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...CVE-2021-21161Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...CVE-2021-21160Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker...CVE-2021-21159Fix available8.8 High
- go-proxyproto project go-proxyproto, fedoraproject fedora +1 moreDenial of Service (DoS)CVE-2021-23351Fix available4.4 Medium
- newlib project newlib, fedoraproject fedora +1 moreA flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory...CVE-2021-3420Fix available9.8 Critical
- openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 moressh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...CVE-2021-28041Fix available7.1 High
- containerd, fedoraproject fedora +1 moreenvironment variable leakCVE-2021-21334Fix available6.3 Medium
- ytnef, fedoraproject fedora, redhat enterprise linux +2 moreIn ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of...CVE-2021-3404Fix available7.8 High
- ytnef, fedoraproject fedora, redhat enterprise linux +2 moreIn ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a...CVE-2021-3403Fix available7.8 High
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreIn LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead...CVE-2020-35522Fix available5.5 Medium
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreA flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF...CVE-2020-35521Fix available5.5 Medium
- cgal computational geometry algorithms library, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...CVE-2020-35628Fix available10.0 Critical
- cgal computational geometry algorithms library, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...CVE-2020-28636Fix available10.0 Critical
- cgal computational geometry algorithms library, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...CVE-2020-28601Fix available10.0 Critical
- slic3r libslic3r, fedoraproject fedora +1 moreAn out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement()...CVE-2020-28591Fix available8.6 High
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external...CVE-2020-82966.7 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreNextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to...CVE-2021-228784.8 Medium
- fedoraproject fedora, hackerone nextcloud server, nextcloud server +2 moreA missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own...CVE-2021-228776.5 Medium
- markdown2 project markdown2, fedoraproject fedora +1 moremarkdown2 Regular Expression Denial of ServiceCVE-2021-26813Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePillow Denial of Service by Uncontrolled Resource ConsumptionCVE-2021-27921Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePillow Uncontrolled Resource ConsumptionCVE-2021-27922Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePillow Denial of Service by Uncontrolled Resource ConsumptionCVE-2021-27923Fix available7.5 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code...CVE-2021-20233Public exploitFix available8.2 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to...CVE-2021-20225Fix available6.7 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure...CVE-2020-27779Fix available7.5 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the...CVE-2020-27749Fix available6.7 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. During USB device initialization,...CVE-2020-25647Fix available7.6 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the...CVE-2020-25632Public exploitFix available8.2 High
- gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 moreA flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of...CVE-2020-14372Public exploitFix available7.5 High
- debian linux, fedoraproject fedora, w1.fi wpa supplicant +2 moreA vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P ...CVE-2021-27803Fix available7.5 High
- element-hq synapse, fedoraproject fedora +1 moreOpen redirects on some federation and push requestsCVE-2021-21273Fix available3.1 Low
- element-hq synapse, fedoraproject fedora +1 moreDenial of service attack via .well-known lookupsCVE-2021-21274Fix available4.3 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt is vulnerable to shell injection via ProxyCommand argumentCVE-2021-3197Fix availableEPSS 71.7%9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt command injection in the Salt-API when using the Salt-SSH clientCVE-2021-3148Fix available9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt eauth tokens can be used once after expirationCVE-2021-3144Fix available9.1 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Cleartext Storage of Sensitive Information via cmdmodCVE-2021-25284Fix available4.4 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Server Side Template InjectionCVE-2021-25283Fix availableEPSS 10.4%9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Directory Traversal vulnerabilityCVE-2021-25282Public exploitFix availableEPSS 92.6%9.1 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Authentication vulnerabilityCVE-2021-25281Public exploitFix availableEPSS 72.9%9.8 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper SSL Certificate ValidationCVE-2020-35662Fix available7.4 High
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Certificate ValidationCVE-2020-28972Fix available5.9 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt command injection via a crafted process nameCVE-2020-28243Public exploitFix available7.8 High
- aio-libs aiohttp, debian linux, fedoraproject fedora +2 moreOpen redirect vulnerability in aiohttpCVE-2021-21330Fix available3.1 Low
- microsoft .net, .net core, fedoraproject fedora +13 more +15 more.NET Core Remote Code Execution VulnerabilityCVE-2021-26701Fix availableEPSS 30.1%8.1 High
- keylime, fedoraproject fedora +1 moreA flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.CVE-2021-34069.8 Critical
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file...CVE-2021-20246Fix available5.5 Medium
- Show moreLoading…