Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21203Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who...CVE-2021-21202Fix available8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker...CVE-2021-21201Fix available9.6 Critical
- openvpn, canonical ubuntu linux, debian linux +1 more +3 moreOpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access...CVE-2020-15078Fix available7.5 High
- exiv2, debian linux, fedoraproject fedora +2 moreOut-of-bounds read in Exiv2::Jp2Image::doWriteMetadataCVE-2021-29473Fix available2.5 Low
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreExcessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12...CVE-2021-22207Fix available5.5 Medium
- exiftool, debian linux, fedoraproject fedora +2 moreImproper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up...CVE-2021-22204In KEVPublic exploitFix availableEPSS 100.0%6.8 Medium
- saltstack salt, fedoraproject fedora +1 moreCommand Injection in SaltStack SaltCVE-2021-31607Fix available7.8 High
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::Jp2Image::encodeJp2HeaderCVE-2021-29470Fix available4.7 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2196Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2193Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2180Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication...CVE-2021-2179Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....CVE-2021-2178Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2174Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2172Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....CVE-2021-2171Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2170Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2169Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2166Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2164Fix available4.9 Medium
- oracle graalvm, debian linux, fedoraproject fedora +10 more +12 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...CVE-2021-2161Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2154Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2021-2146Fix available4.9 Medium
- juniper paragon active assurance control center, juniper networks paragon active assurance, fedoraproject fedora +2 moreParagon Active Assurance: Authentication bypass vulnerability in Control CenterCVE-2021-02327.4 High
- debian linux, linux kernel, broadcom brocade fabric operating system +12 more +14 moreLinux Kernel sctp_destroy_sock race conditionCVE-2021-23133Fix available6.7 Medium
- oracle graalvm, debian linux, fedoraproject fedora +9 more +11 moreVulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of...CVE-2021-2163Fix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs...CVE-2021-29155Public exploitFix available5.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit...CVE-2021-3505Fix available5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreOut-of-bounds read in Exiv2::Internal::CrwMap::encodeCVE-2021-29458Fix available5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Exiv2::Jp2Image::doWriteMetadataCVE-2021-29457Fix available7.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed...CVE-2021-21220In KEVPublic exploitFix availableEPSS 70.4%8.8 High
- google chrome, fedoraproject fedora, google chromium blink +2 moreUse after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to...CVE-2021-21206In KEVFix available8.8 High
- ceph, debian linux, fedoraproject fedora +1 more +3 moreAn authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles...CVE-2021-20288Fix available7.2 High
- fedoraproject fedora, yubico yubihsm connector +1 moreInfinite loop in Yubico yubihsm-connectorCVE-2021-28484Fix available7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreInteger Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a...CVE-2021-29338Fix available5.5 Medium
- nextcloud desktop, fedoraproject fedora +1 moreNextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing...CVE-2021-22879Fix available8.8 High
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.50.3, there is an optimization for joining strings that...CVE-2020-36323Fix available8.2 High
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.53.0, a double free can occur in the Vec::from_iter...CVE-2021-31162Fix available9.8 Critical
- libexif project exif, fedoraproject fedora +1 moreNULL Pointer Deference in the "actions.c" library of libexif exif v0.6.22 allows attackers to...CVE-2021-27815Fix available5.5 Medium
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in...CVE-2021-3472Fix available7.8 High
- cifs-utils, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file...CVE-2021-20208Fix available6.1 Medium
- element-hq synapse, fedoraproject fedora +1 moreOpen redirect via transitional IPv6 addresses on dual-stack networksCVE-2021-21392Fix available6.3 Medium
- element-hq synapse, fedoraproject fedora +1 moreDenial of service (via resource exhaustion) due to improper input validation on groups/communities endpointsCVE-2021-21393Fix available5.3 Medium
- element-hq synapse, fedoraproject fedora +1 moreDenial of service (via resource exhaustion) due to improper input validation on third-party identifier endpointsCVE-2021-21394Fix available5.3 Medium
- apache subversion, apple macos, debian linux +1 more +3 moreApache Subversion mod_dav_svn is vulnerable to memory corruptionCVE-2022-24070Fix available7.5 High
- ruby-lang rexml, ruby, fedoraproject fedora +2 moreREXML round-trip instabilityCVE-2021-28965Fix available7.5 High
- apache subversion, apple macos, debian linux +1 more +3 moreApache Subversion SVN authz protected copyfrom paths regressionCVE-2021-28544Fix available4.3 Medium
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect...CVE-2021-28879Public exploitFix available9.8 Critical
- rust-lang rust, fedoraproject fedora +1 moreIn the standard library in Rust before 1.52.0, the Zip implementation calls...CVE-2021-28878Fix available7.5 High
- Show moreLoading…