Skip to contentFedoraproject Fedora vulnerabilities
- squid-cache squid, fedoraproject fedora +1 moreAn issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allo…CVE-2021-41611Fix available7.5 High
- bestpractical request tracker, debian linux, fedoraproject fedora +2 moreBest Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2...CVE-2021-38562Fix available7.5 High
- strongswan, debian linux, fedoraproject fedora +22 more +24 moreThe in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon...CVE-2021-41991Fix available7.5 High
- strongswan, debian linux, fedoraproject fedora +17 more +19 moreThe gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate...CVE-2021-41990Fix available7.5 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3875Fix available7.8 High
- stb project stb, debian linux, fedoraproject fedora +2 moreBuffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a...CVE-2021-28021Fix available7.8 High
- golang go, fedoraproject fedora +1 moreGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function...CVE-2021-38297Public exploitFix availableEPSS 11.0%9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote...CVE-2021-37980Public exploitFix available7.4 High
- google chrome, debian linux, fedoraproject fedora +2 moreheap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker...CVE-2021-37979Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to...CVE-2021-37978Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote...CVE-2021-37977Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with...CVE-2021-3669Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote...CVE-2021-37976In KEVFix availableEPSS 19.9%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker...CVE-2021-37974Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who...CVE-2021-37973In KEVFix availableEPSS 11.7%9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote...CVE-2021-37972Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote...CVE-2021-37971Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote...CVE-2021-37970Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54...CVE-2021-37969Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...CVE-2021-37968Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...CVE-2021-37967Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54...CVE-2021-37966Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54...CVE-2021-37965Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0...CVE-2021-37964Fix available3.3 Low
- google chrome, debian linux, fedoraproject fedora +2 moreSide-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a...CVE-2021-37963Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote...CVE-2021-37962Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to...CVE-2021-37961Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who...CVE-2021-37959Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54...CVE-2021-37958Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to...CVE-2021-37957Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote...CVE-2021-37956Fix available8.8 High
- debian linux, flatpak, fedoraproject fedora +2 moreSandbox bypass via recent VFS-manipulating syscallsCVE-2021-41133Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to...CVE-2021-37975In KEVPublic exploitFix availableEPSS 34.9%8.8 High
- apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 morePath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)CVE-2021-42013In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- debian linux, fedoraproject fedora, xen +2 morePCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned...CVE-2021-28702Fix available7.6 High
- grafana, fedoraproject fedora +1 moreSnapshot authentication bypass in grafanaCVE-2021-39226In KEVFix availableEPSS 99.9%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morePath traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49CVE-2021-41773In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morenull pointer dereference in h2 fuzzingCVE-2021-41524Fix availableEPSS 25.8%7.5 High
- moby, fedoraproject fedora +1 moreInsufficiently restricted permissions on data directory in Docker EngineCVE-2021-41091Public exploitFix available6.3 Medium
- cli, docker command line interface, fedoraproject fedora +2 moreDocker CLI leaks private registry credentials to registry-1.docker.ioCVE-2021-41092Fix available5.4 Medium
- redis, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow issue with strings in RedisCVE-2021-41099Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platformsCVE-2021-32762Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow issue with intsets in RedisCVE-2021-32687Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreDoS vulnerability in RedisCVE-2021-32675Public exploitFix availableEPSS 16.1%7.5 High
- redis, debian linux, fedoraproject fedora +5 more +7 moreVulnerability in Lua Debugger in RedisCVE-2021-32672Fix available5.3 Medium
- redis, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow issue with Streams in RedisCVE-2021-32627Fix available7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreVulnerability in handling large ziplistsCVE-2021-32628Fix availableEPSS 13.0%7.5 High
- redis, debian linux, fedoraproject fedora +3 more +5 moreLua scripts can overflow the heap-based Lua stack in RedisCVE-2021-32626Fix availableEPSS 15.6%7.5 High
- containerd, debian linux, fedoraproject fedora +2 moreInsufficiently restricted permissions on plugin directoriesCVE-2021-41103Fix available5.9 Medium
- moby, fedoraproject fedora +1 more`docker cp` allows unexpected chmod of host filesCVE-2021-41089Fix available2.8 Low
- Show moreLoading…