Skip to contentFedoraproject Fedora vulnerabilities
- ceph, redhat ceph storage, fedoraproject fedora +2 moreA flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a...CVE-2021-3531Fix available5.3 Medium
- x.org libx11, fedoraproject fedora, x.org x window system +2 moreLookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to...CVE-2021-31535Fix availableEPSS 10.4%9.8 Critical
- ceph, redhat ceph storage, debian linux +1 more +3 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14...CVE-2021-3524Fix available6.5 Medium
- exiv2, fedoraproject fedora +1 moreDenial of service in Exiv2CVE-2021-32617Fix available4.7 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30520Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30519Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote...CVE-2021-30518Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30517Public exploitFix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker...CVE-2021-30516Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30515Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who...CVE-2021-30514Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30513Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker...CVE-2021-30512Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30511Fix available8.1 High
- google chrome, fedoraproject fedora +1 moreUse after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30510Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30509Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker...CVE-2021-30508Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212...CVE-2021-30507Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212...CVE-2021-30506Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying...CVE-2021-33034Public exploitFix available7.8 High
- upx, fedoraproject fedora +1 moreA heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not...CVE-2020-24119Fix available7.1 High
- virustotal yara, fedoraproject fedora +1 moreAn integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4...CVE-2021-3402Fix available9.1 Critical
- radare radare2, fedoraproject fedora +1 moreIn radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file...CVE-2021-32613Fix available5.5 Medium
- pydantic, fedoraproject fedora +1 moreUse of "infinity" as an input to datetime and date fields causes infinite loop in pydanticCVE-2021-29510Fix available3.3 Low
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for...CVE-2021-32921Fix available5.9 Medium
- prosody, debian linux, fedoraproject fedora +2 moreProsody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation...CVE-2021-32920Fix available7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback...CVE-2021-32919Fix available7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote...CVE-2021-32918Fix available7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by...CVE-2021-32917Fix available5.3 Medium
- c-ares, fedoraproject fedora +1 moreA possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is...CVE-2020-14354Fix available3.3 Low
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code...CVE-2021-31215Fix available8.8 High
- exiv2, fedoraproject fedora +1 moreUninitialized variable bug in Exiv2CVE-2021-29623Fix available3.6 Low
- sensiolabs symfony, fedoraproject fedora +1 morePrevent user enumeration using Guard or the new Authenticator-based SecurityCVE-2021-21424Public exploitFix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +7 more +9 moreLinux kernel llcp_sock_bind/connect use-after-freeCVE-2021-23134Fix available7.8 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +7 more +9 more.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2021-31204Fix available7.3 High
- element-hq synapse, fedoraproject fedora +1 moreDenial of service in Matrix SynapseCVE-2021-29471Fix available3.7 Low
- linux kernel, fedoraproject fedora +1 moreIn the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege...CVE-2021-326067.8 High
- systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moreAn exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP...CVE-2020-13529Fix available6.1 Medium
- cyrus imap, fedoraproject fedora +1 moreCyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to...CVE-2021-32056Fix available4.3 Medium
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- microsoft hivex, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of...CVE-2021-3504Fix available5.4 Medium
- python pillow, fedoraproject fedora +1 moreInsufficient Verification of Data Authenticity in PillowCVE-2021-28678Fix available5.5 Medium
- python pillow, fedoraproject fedora +1 moreUncontrolled Resource Consumption in PillowCVE-2021-28677Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePotential infinite loop in PillowCVE-2021-28676Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePillow denial of serviceCVE-2021-28675Fix available5.5 Medium
- python pillow, fedoraproject fedora +1 morePillow Out-of-bounds Read vulnerabilityCVE-2021-25288Fix available9.1 Critical
- python pillow, fedoraproject fedora +1 moreOut-of-bounds Read in PillowCVE-2021-25287Fix available9.1 Critical
- eventlet, fedoraproject fedora +1 moreImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventletCVE-2021-21419Fix available5.3 Medium
- djangoproject django, fedoraproject fedora +1 moreHeader injection possible in DjangoCVE-2021-32052Fix available6.1 Medium
- debian linux, linux kernel, fedoraproject fedora +2 morekernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads,...CVE-2021-31829Fix available5.5 Medium
- Show moreLoading…