Skip to contentFedoraproject Fedora vulnerabilities
- radare radare2, fedoraproject fedora +1 moreA vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a...CVE-2021-3673Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...CVE-2021-34556Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information...CVE-2021-35477Fix available5.5 Medium
- sylpheed project sylpheed, claws-mail, fedoraproject fedora +2 moretextview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0...CVE-2021-37746Fix available6.1 Medium
- crossbeam-rs crossbeam, fedoraproject fedora +1 moreData race in crossbeam-dequeCVE-2021-32810Fix available9.8 Critical
- fetchmail, fedoraproject fedora +1 morereport_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the...CVE-2021-36386Fix available7.5 High
- unknown video.js, fedoraproject fedora +1 moreCross-site Scripting (XSS)CVE-2021-23414Fix available6.5 Medium
- bluez, fedoraproject fedora +1 morebluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered...CVE-2021-3658Fix available6.5 Medium
- linux kernel, fedoraproject fedora +1 morearch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows...CVE-2021-37576Fix available7.8 High
- fedoraproject fedora, openidc mod auth openidc +1 moreXSS vulnerability when using OIDCPreservePost On in mod_auth_openidcCVE-2021-32792Fix available3.1 Low
- fedoraproject fedora, openidc mod auth openidc +1 moreHardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidcCVE-2021-32791Fix available5.9 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreAn integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap...CVE-2021-31292Fix available7.5 High
- oisf suricata, debian linux, fedoraproject fedora +2 moreSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."CVE-2021-35063Fix available7.5 High
- fedoraproject fedora, openidc mod auth openidc +1 moreOpen Redirect in oidc_validate_redirect_url()CVE-2021-32786Fix available4.7 Medium
- artifex mupdf, fedoraproject fedora +1 moreMuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not...CVE-2021-37220Fix available5.5 Medium
- redis, debian linux, fedoraproject fedora +2 moreInteger overflow issues with *BIT commands on 32-bit systemsCVE-2021-32761Fix availableEPSS 30.1%7.5 High
- debian linux, fedoraproject fedora, php archive tar +2 moreDirectory Traversal in Archive_TarCVE-2021-32610Fix availableEPSS 73.4%7.1 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...CVE-2021-22923Fix available5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...CVE-2021-22922Fix available6.5 Medium
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- oracle mysql server, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2389Fix available5.9 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....CVE-2021-2385Fix available5.0 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2384Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2383Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2374Fix available4.1 Medium
- oracle mysql server, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2021-2372Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2021-2370Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2367Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2357Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....CVE-2021-2356Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated)....CVE-2021-2354Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2021-2352Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2342Fix available4.9 Medium
- oracle graalvm, debian linux, fedoraproject fedora +4 more +6 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2341Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached)....CVE-2021-2340Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2021-2339Fix available4.9 Medium
- libarchive, apple ipados, iphone os +4 more +6 morelibarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from...CVE-2021-36976Fix available6.5 Medium
- unicorn-engine unicorn engine, fedoraproject fedora +1 moreUnicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb...CVE-2021-369795.5 Medium
- libass project libass, fedoraproject fedora +1 morelibass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from...CVE-2020-36430Fix available7.8 High
- gnu aspell, debian linux, fedoraproject fedora +2 moreobjstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top ...CVE-2019-25051Fix available7.8 High
- systemd project systemd, debian linux, fedoraproject fedora +5 more +7 morebasic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...CVE-2021-33910Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 morefs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict...CVE-2021-33909Public exploitFix available7.8 High
- libsndfile project libsndfile, debian linux, fedoraproject fedora +2 moreA heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows...CVE-2021-3246Fix available8.8 High
- containerd, fedoraproject fedora +1 moreArchive package allows chmod of file outside of unpack target directoryCVE-2021-32760Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreA flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found...CVE-2021-3640Fix available7.0 High
- fail2ban, fedoraproject fedora +1 morePossible RCE vulnerability in mailing action using mailutils (mail-whois)CVE-2021-32749Fix available6.1 Medium
- golang go, fedoraproject fedora, netapp cloud insights telegraf +3 more +5 moreThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...CVE-2021-34558Public exploitFix available6.5 Medium
- varnish-cache varnish cache, varnish cache project cache, debian linux +1 more +3 moreVarnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a...CVE-2021-36740Fix available6.5 Medium
- arm mbed tls, debian linux, fedoraproject fedora +2 moreIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...CVE-2021-24119Fix available4.9 Medium
- Show moreLoading…