Skip to contentFedoraproject Fedora vulnerabilities
- mariadb, fedoraproject fedora +1 moreMariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value...CVE-2021-46664Fix available5.5 Medium
- mariadb, fedoraproject fedora +1 moreMariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables...CVE-2021-46665Fix available5.5 Medium
- mariadb, fedoraproject fedora +1 moreMariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.CVE-2021-46667Fix available5.5 Medium
- mariadb, fedoraproject fedora +1 moreMariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements...CVE-2021-46668Fix available5.5 Medium
- mariadb, debian linux, fedoraproject fedora +2 moreMariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the...CVE-2021-46669Fix available7.5 High
- x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreInfinite Loop in DjangoCVE-2022-23833Fix availableEPSS 49.5%7.5 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreCross-site Scripting in DjangoCVE-2022-22818Public exploitFix available6.1 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0417Fix available8.4 High
- invisible-island xterm, debian linux, fedoraproject fedora +2 morexterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer...CVE-2022-24130Fix available5.5 Medium
- samba, fedoraproject fedora +1 moreThe Samba AD DC includes checks when adding service principals names (SPNs) to an account to...CVE-2022-0336Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- samba, fedoraproject fedora, redhat storage +2 moreAll versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink...CVE-2021-44141Fix available4.3 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-0413Fix available8.4 High
- vim, vim vim/vim, debian linux +1 more +3 moreStack-based Buffer Overflow in vim/vimCVE-2022-0408Fix available8.4 High
- mariadb, fedoraproject fedora +1 moreMariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX:...CVE-2021-46659Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 morekernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are...CVE-2022-24122Public exploitFix available7.8 High
- getlaminas laminas-form, fedoraproject fedora +1 moreReflected XSS vulnerability when rendering error messages in laminas-formCVE-2022-23598Fix available6.1 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vimCVE-2022-0393Fix available8.4 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.CVE-2022-23990Public exploitFix available7.5 High
- varnish-software varnish cache, varnish cache project cache, debian linux +3 more +5 moreIn Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and...CVE-2022-23959Fix available9.1 Critical
- linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0330Fix available7.8 High
- google protobuf, debian linux, fedoraproject fedora +5 more +7 moreNullptr Dereference in ProtobufCVE-2021-22570Fix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreInsufficient cleanup of passed-through device IRQs The management of IRQs associated with...CVE-2022-23035Fix available4.6 Medium
- xen, debian linux, fedoraproject fedora +2 moreA PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was...CVE-2022-23034Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morearm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more...CVE-2022-23033Fix available7.8 High
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP...CVE-2022-0322Fix available5.5 Medium
- librecad, debian linux, fedoraproject fedora +2 moreIn LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an...CVE-2021-45343Fix available5.5 Medium
- librecad, debian linux, fedoraproject fedora +2 moreA buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and...CVE-2021-45342Fix available7.8 High
- librecad, debian linux, fedoraproject fedora +2 moreA buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and...CVE-2021-45341Fix available8.8 High
- bluez, debian linux, fedoraproject fedora +2 moreA heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with...CVE-2022-0204Fix available8.8 High
- strongswan, canonical ubuntu linux, debian linux +2 more +4 moreIn strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...CVE-2021-45079Fix available9.1 Critical
- kernel util-linux, fedoraproject fedora +1 moreCVE-2021-3996 does not affect BellSoft softwareCVE-2021-3996Fix available5.5 Medium
- kernel util-linux, fedoraproject fedora +1 moreCVE-2021-3995 does not affect BellSoft softwareCVE-2021-3995Fix available5.5 Medium
- apple macos, rust-lang rust, apple ipados +4 more +6 moreRace condition in std::fs::remove_dir_all in rustlangCVE-2022-21658Public exploitFix available7.3 High
- advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 moreAIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such...CVE-2021-45417Fix available7.8 High
- ipython, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in ipythonCVE-2022-21699Fix available8.2 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21339Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2022-21304Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....CVE-2022-21303Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2022-21302Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2022-21301Fix available5.5 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated)....CVE-2022-21270Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21265Fix available3.8 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21264Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication...CVE-2022-21256Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21254Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2022-21253Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2022-21249Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2022-21245Fix available4.3 Medium
- Show moreLoading…