Skip to contentFedoraproject Fedora vulnerabilities
- getdata project getdata, debian linux, fedoraproject fedora +2 moreA heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when...CVE-2021-20204Fix available9.8 Critical
- aomedia, fedoraproject fedora +1 moreaom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.CVE-2021-30473Fix available9.8 Critical
- linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 moreA flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...CVE-2021-3501Fix available7.1 High
- osgeo mapserver, fedoraproject fedora +1 moreMapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and...CVE-2021-32062Fix available5.3 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 moreThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...CVE-2021-3516Fix available7.8 High
- secureauth impacket, fedoraproject fedora +1 morePath traversal in impacketCVE-2021-31800Public exploitFix availableEPSS 19.4%9.8 Critical
- redis, fedoraproject fedora +1 moreVulnerability in the COPY command for large intsetsCVE-2021-29478Fix available7.5 High
- redis, fedoraproject fedora +1 moreVulnerability in the STRALGO LCS commandCVE-2021-29477Fix available7.5 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...CVE-2021-26260Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...CVE-2021-23215Fix available5.5 Medium
- djangoproject django, debian linux, fedoraproject fedora +2 morePath Traversal in DjangoCVE-2021-31542Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote...CVE-2021-21233Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to...CVE-2021-21232Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote...CVE-2021-21231Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to...CVE-2021-21230Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a...CVE-2021-21229Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an...CVE-2021-21228Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote...CVE-2021-21227Fix available8.8 High
- opensuse factory, leap 15.2, suse cups +4 more +6 morecups: ownership of /var/log/cups allows the lp user to create files as rootCVE-2021-25317Fix available3.3 Low
- exiv2, fedoraproject fedora +1 moreHeap buffer overflow in Exiv2::Jp2Image::encodeJp2HeaderCVE-2021-29464Fix available3.3 Low
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::WebPImage::doWriteMetadataCVE-2021-29463Fix available3.3 Low
- graphviz, debian linux, fedoraproject fedora +2 moreBuffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows...CVE-2020-18032Fix available7.8 High
- bundler, fedoraproject fedora, microsoft package manager configurations +2 moreDependency Confusion in BundlerCVE-2020-36327Fix available8.8 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs)...CVE-2021-20254Fix available6.8 Medium
- isc bind, debian linux, fedoraproject fedora +14 more +16 moreAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfCVE-2021-25215Fix availableEPSS 11.7%7.5 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyCVE-2021-25214Fix available6.5 Medium
- composer, debian linux, fedoraproject fedora +2 moreMissing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composerCVE-2021-29472Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...CVE-2021-21226Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote...CVE-2021-21225Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreType confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute...CVE-2021-21224In KEVFix availableEPSS 84.2%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had...CVE-2021-21223Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...CVE-2021-21222Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed...CVE-2021-21221Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21219Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21218Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21217Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21216Fix availableEPSS 21.8%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21215Fix availableEPSS 34.5%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21214Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to...CVE-2021-21213Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72...CVE-2021-21212Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed...CVE-2021-21211Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21210Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote...CVE-2021-21209Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed...CVE-2021-21208Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who...CVE-2021-21207Fix available8.6 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72...CVE-2021-21205Fix available8.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker...CVE-2021-21204Fix available8.8 High
- Show moreLoading…