Skip to contentFedoraproject Fedora vulnerabilities
- qemu, fedoraproject fedora +1 moreAn out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw...CVE-2021-3638Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreprealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows...CVE-2021-41864Fix available7.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki allows a denial of serviceCVE-2021-41800Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...CVE-2021-41799Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...CVE-2021-41798Fix available6.1 Medium
- microsoft usbredir, debian linux, fedoraproject fedora +1 more +3 moreA use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the...CVE-2021-3700Fix available6.4 Medium
- openbsd openssh, fedoraproject fedora, netapp active iq unified manager +14 more +16 moresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...CVE-2021-41617Public exploitFix available7.0 High
- microsoft hivex, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted...CVE-2021-3622Fix available4.3 Medium
- google chrome, fedoraproject fedora, google chromium indexed db api +2 moreUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30633In KEVFix availableEPSS 33.2%9.6 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 moreOut of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to...CVE-2021-30632In KEVPublic exploitFix availableEPSS 63.2%8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote...CVE-2021-30630Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30629Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreStack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30628Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30627Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote...CVE-2021-30626Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...CVE-2021-30625Fix availableEPSS 10.1%8.8 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreloop_rw_iter in fs/io_uring.c in the Linux kernel through 5.14.6 allows local users to gain...CVE-2021-41073Public exploitFix available7.8 High
- bytecodealliance wasmtime, fedoraproject fedora +1 moreWrong type for `Linker`-define functions when used across two `Engine`sCVE-2021-39219Fix available6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in WasmtimeCVE-2021-39218Fix available6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreUse after free passing `externref`s to Wasm in WasmtimeCVE-2021-39216Fix available6.3 Medium
- debian linux, linux kernel, fedoraproject fedora +16 more +18 moreA use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls...CVE-2021-3752Fix available7.1 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflowCVE-2021-39275Fix availableEPSS 39.4%9.8 Critical
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- apache http server, broadcom brocade fabric operating system firmware, debian linux +14 more +16 moreNULL pointer dereference in httpd coreCVE-2021-34798Fix availableEPSS 64.5%7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vimCVE-2021-3796Fix available8.2 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3778Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3744Fix available5.5 Medium
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- haxx libcurl, apple macos, debian linux +17 more +19 moreWhen sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances...CVE-2021-22945Fix available9.1 Critical
- rencode project rencode, fedoraproject fedora +1 moreInfinite Loop in rencodeCVE-2021-40839Public exploitFix available7.5 High
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the libtpms code that may cause access beyond the boundary of internal...CVE-2021-3746Fix available6.5 Medium
- flask-restx project flask-restx, fedoraproject fedora +1 moreRegular Expression Denial of Service in flask-restxCVE-2021-32838Fix available7.5 High
- ribbonsoft dxflib, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of...CVE-2021-21897Fix available8.8 High
- saltstack salt, fedoraproject fedora +1 moreImproper Authentication in SaltStack SaltCVE-2021-22004Fix available6.4 Medium
- xen, debian linux, fedoraproject fedora +2 moreAnother race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned...CVE-2021-28701Fix available7.8 High
- artifex ghostscript, fedoraproject fedora +1 moreA trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript...CVE-2021-3781Fix availableEPSS 83.9%9.9 Critical
- saltstack salt, debian linux, fedoraproject fedora +2 moreExposure of Resource to Wrong Sphere in saltCVE-2021-21996Fix available7.5 High
- lcdf gifsicle, fedoraproject fedora +1 moreThe find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.CVE-2020-19752Fix available7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to...CVE-2021-40346Public exploitFix availableEPSS 58.8%7.5 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer...CVE-2021-39254Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8...CVE-2021-39253Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreA crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.CVE-2021-39252Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...CVE-2021-39251Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is...CVE-2021-35269Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the...CVE-2021-35268Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting...CVE-2021-35267Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied...CVE-2021-35266Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an...CVE-2021-33289Fix available7.8 High
- Show moreLoading…