Skip to contentFedoraproject Fedora vulnerabilities
- wireshark, fedoraproject fedora +1 moreNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39920Fix available7.5 High
- fedoraproject fedora, linuxfoundation open container initiative distribution specification, open container initiative image format specification +1 more +3 moreClarify Content-Type handling in OCI specCVE-2021-41190Fix available3.0 Low
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia...CVE-2021-43975Fix available6.7 Medium
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new...CVE-2021-433376.5 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreIn the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb...CVE-2021-43976Fix available4.6 Medium
- ckeditor, ckeditor ckeditor4, drupal +8 more +10 moreAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTMLCVE-2021-41164Fix available8.2 High
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42386Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42385Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42384Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42383Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42382Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42381Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42380Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42379Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42378Fix available7.2 High
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn attacker-controlled pointer free in Busybox's hush applet leads to denial of service and...CVE-2021-42377Fix available9.8 Critical
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreA NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a...CVE-2021-42376Fix available5.5 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn incorrect handling of a special element in Busybox's ash applet leads to denial of service...CVE-2021-42375Fix available5.5 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of...CVE-2021-42374Fix available5.3 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreA NULL pointer dereference in Busybox's man applet leads to denial of service when a section name...CVE-2021-42373Fix available5.5 Medium
- npmjs npm, fedoraproject fedora, netapp next generation application programming interface +2 moreThe npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...CVE-2021-43616Public exploitFix availableDisputed9.0 Critical
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux...CVE-2021-20320Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...CVE-2021-3941Fix available6.5 Medium
- fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 moreWhen the server is configured to use trust authentication with a clientcert requirement or to use...CVE-2021-23214Fix available8.1 High
- xiph speex, fedoraproject fedora +1 moreA Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...CVE-2020-23903Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow could occur when OpenEXR processes a crafted file on systems where size_t <...CVE-2021-3933Fix available5.5 Medium
- lua, fedoraproject fedora +1 moreStack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform...CVE-2021-43519Fix available5.5 Medium
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...CVE-2020-25722Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, fedoraproject fedora +1 moreA flaw was found in the way samba, as an Active Directory Domain Controller, is able to support...CVE-2020-25718Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-38003In KEVPublic exploitFix availableEPSS 38.6%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker...CVE-2021-38002Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to...CVE-2021-38001Public exploitFix availableEPSS 26.7%8.8 High
- google android, chrome, debian linux +2 more +4 moreInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0...CVE-2021-38000In KEVFix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a...CVE-2021-37999Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote...CVE-2021-37998Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who...CVE-2021-37997Fix available8.8 High
- barrier project barrier, fedoraproject fedora +1 moreAn issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side...CVE-2021-420728.8 High
- golang go, fedoraproject fedora, oracle timesten in-memory database +2 moreGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...CVE-2021-41772Fix available7.5 High
- golang go, debian linux, fedoraproject fedora +2 moreImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17...CVE-2021-41771Fix available7.5 High
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse of Uninitialized Variable in vim/vimCVE-2021-3928Fix available7.3 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3927Fix available7.3 High
- udisks project udisks, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...CVE-2021-3802Fix available4.2 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreOWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is...CVE-2021-35368Fix available9.8 Critical
- libxls project libxls, fedoraproject fedora +1 moreAn issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows...CVE-2021-27836Fix available6.5 Medium
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose()...CVE-2020-27820Fix available4.7 Medium
- Show moreLoading…