Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, fedoraproject fedora +1 moreUse after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who...CVE-2021-30524Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...CVE-2021-30523Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to...CVE-2021-30522Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a...CVE-2021-30521Fix available8.8 High
- qemu, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of...CVE-2020-35503Fix available6.0 Medium
- djangoproject django, fedoraproject fedora +1 moreDjango Access Control Bypass possibly leading to SSRF, RFI, and LFI attacksCVE-2021-33571Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 morePath Traversal in DjangoCVE-2021-33203Fix available4.9 Medium
- python urllib3, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moreCatastrophic backtracking in URL authority parser when passed URL containing many @ charactersCVE-2021-33503Fix available7.5 High
- entrouvert lasso, debian linux, fedoraproject fedora +2 moreLasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.CVE-2021-28091Fix available7.5 High
- linux kernel, nitro enclaves project enclaves, fedoraproject fedora +1 more +3 moreA flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that...CVE-2021-3543Fix available6.7 Medium
- google android, debian linux, fedoraproject fedora +2 moreIn append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds...CVE-2021-0561Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreA flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was...CVE-2021-3564Fix available5.5 Medium
- radsecproxy, fedoraproject fedora +1 moreMissing input validation in dynamic discovery example scripts.CVE-2021-32642Fix available7.0 High
- microsoft zeromq, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious...CVE-2021-20236Fix available9.8 Critical
- qemu, debian linux, fedoraproject fedora +2 moreA NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions...CVE-2020-35504Fix available6.0 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 moreSquid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service ...CVE-2021-33620Fix availableEPSS 79.6%6.5 Medium
- squid-cache squid, fedoraproject fedora, netapp cloud manager +2 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem...CVE-2021-31807Fix availableEPSS 15.6%6.5 Medium
- golang go, fedoraproject fedora +1 moregolang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525Fix available5.9 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +9 more +11 morekernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer...CVE-2021-33200Fix available7.8 High
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug...CVE-2021-31808Fix available6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug...CVE-2021-31806Fix availableEPSS 95.3%6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2021-28662Fix availableEPSS 71.8%6.5 Medium
- squid-cache squid, debian linux, fedoraproject fedora +2 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2021-28652Fix available4.9 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreModerate: squid:4 security, bug fix, and enhancement updateCVE-2021-28651Fix available7.5 High
- upx, fedoraproject fedora, redhat enterprise linux +2 moreAn assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow...CVE-2021-30501Fix available5.5 Medium
- upx, fedoraproject fedora, redhat enterprise linux +2 moreNull pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version...CVE-2021-30500Fix available7.8 High
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to...CVE-2021-30499Fix available7.8 High
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary...CVE-2021-30471Fix available5.5 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(),...CVE-2021-30470Fix available5.5 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function...CVE-2021-304695.5 Medium
- fig2dev project fig2dev, debian linux, fedoraproject fedora +2 moreAn Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects()...CVE-2021-3561Fix available7.1 High
- ckeditor, debian linux, drupal +1 more +3 moreckeditor4 vulnerable to cross-site scriptingCVE-2021-33829Fix available6.1 Medium
- golang go, fedoraproject fedora +1 moregolang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194Fix available7.5 High
- debian linux, fedoraproject fedora, linux kernel +10 more +12 moreImproper memory handling in Linux KVMCVE-2021-22543Fix available8.7 High
- haxx curl, debian linux, fedoraproject fedora +12 more +14 morecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...CVE-2021-22898Fix available3.1 Low
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead...CVE-2021-30498Fix available7.8 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclientCVE-2021-25217Fix available7.4 High
- yubico pam-u2f, fedoraproject fedora +1 moreYubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and...CVE-2021-31924Fix available6.8 Medium
- gnu glibc, debian linux, fedoraproject fedora +13 more +15 moreThe mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...CVE-2021-33574Fix available9.8 Critical
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...CVE-2021-23017Public exploitFix availableEPSS 53.5%7.7 High
- bluetooth core specification, fedoraproject fedora, intel ac 3165 firmware +14 more +16 moreBluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may...CVE-2020-26555Fix available5.4 Medium
- bluetooth core specification, debian linux, fedoraproject fedora +16 more +18 moreBluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit...CVE-2020-26558Fix available4.2 Medium
- eterm project eterm, mrxvt project mrxvt, rxvt-unicode project rxvt-unicode +3 more +5 morerxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code...CVE-2021-33477Fix available8.8 High
- fedoraproject fedora, openidc mod auth openidc, oracle essbase +2 moreCVE-2021-20718 affecting package mod_auth_openidc for versions less than 2.4.14.2-1CVE-2021-20718Fix available7.5 High
- microsoft libdnf, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This...CVE-2021-3445Fix available7.5 High
- linuxfoundation runc, fedoraproject fedora +1 moremount destinations can be swapped via symlink-exchange to cause mounts outside the rootfsCVE-2021-30465Fix availableEPSS 10.2%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-29505Public exploitFix availableEPSS 77.2%7.5 High
- slapi-nis project slapi-nis, fedoraproject fedora +1 moreA flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the...CVE-2021-3480Fix available7.5 High
- gnu cflow, fedoraproject fedora +1 moreUse-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src...CVE-2020-23856Fix available5.5 Medium
- [red hat] networkmanager, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a...CVE-2021-20297Fix available5.5 Medium
- Show moreLoading…