Skip to contentFedoraproject Fedora vulnerabilities
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c...CVE-2021-343396.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in...CVE-2021-343406.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile...CVE-2021-343416.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c...CVE-2021-343426.5 Medium
- keepass, fedoraproject extra packages for enterprise linux, fedora +2 moreA flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in...CVE-2022-0725Public exploit7.5 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreReachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via...CVE-2022-0865Fix available5.5 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0847In KEVPublic exploitFix availableEPSS 92.8%7.8 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 morest21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5...CVE-2022-26490Fix available7.8 High
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a...CVE-2022-26496Fix available9.8 Critical
- debian linux, fedoraproject fedora, network block device project block device +2 moreIn nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer...CVE-2022-26495Fix available9.8 Critical
- github cmark-gfm, fedoraproject fedora +1 moreInteger overflow in table parsing extension leads to heap memory corruptionCVE-2022-24724Fix available8.8 High
- frrouting, fedoraproject fedora +1 moreBuffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a...CVE-2022-26126Fix available7.8 High
- twisted, debian linux, fedoraproject fedora +2 more +4 moreBuffer Overflow in TwistedCVE-2022-21716Fix available7.5 High
- cacti, debian linux, fedoraproject fedora +2 moreUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.CVE-2022-0730Fix available9.8 Critical
- containerd, debian linux, fedoraproject fedora +2 moreInsecure handling of image volumes in containerd CRI pluginCVE-2022-23648Public exploitFix availableEPSS 27.4%7.5 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in...CVE-2022-0516Fix available7.8 High
- python pillow, fedoraproject fedora +1 morePath traversal in PillowCVE-2022-24303Fix available9.1 Critical
- xmlsoft libxml2, apple ipados, iphone os +36 more +38 morevalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Fix available7.5 High
- blender, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds...CVE-2022-0546Fix available7.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreDenial of Service in radareorg/radare2CVE-2022-0695Fix available6.8 Medium
- usbguard project usbguard, debian linux, fedoraproject fedora +2 moreAn issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon...CVE-2019-25058Fix available7.8 High
- imagemagick, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11...CVE-2021-3610Fix available7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in...CVE-2021-3596Fix available6.5 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreDenial of Service in radareorg/radare2CVE-2022-0476Fix available7.3 High
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0729Fix available7.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare2CVE-2022-0713Fix available5.3 Medium
- cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 moreIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...CVE-2022-24407Fix available8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreNULL Pointer Dereference in radareorg/radare2CVE-2022-0712Fix available5.9 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare2CVE-2022-0676Fix available7.8 High
- audiofile, debian linux, fedoraproject fedora +2 moreIn autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo...CVE-2022-24599Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0714Fix availableEPSS 12.7%8.4 High
- libreoffice, fedoraproject fedora +1 moreIncorrect trust validation of signature with ambiguous KeyInfo childrenCVE-2021-25636Fix available7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreNULL Pointer Dereference in vim/vimCVE-2022-0696Fix available6.2 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0685Fix available8.4 High
- ceph, redhat ceph storage, fedoraproject fedora +5 more +7 moreA key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...CVE-2021-3979Fix available6.5 Medium
- stefanberger swtpm, fedoraproject fedora, redhat enterprise linux +2 moreOut-of-bounds read in swtpmCVE-2022-23645Fix available6.2 Medium
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...CVE-2021-3657Fix available9.8 Critical
- cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 moreCommand Injection in CobblerCVE-2021-45082Fix available7.8 High
- cobbler project cobbler, fedoraproject fedora +1 moreIncorrect Default Permissions in CobblerCVE-2021-45083Fix available7.1 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.CVE-2022-25314Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.CVE-2022-25315Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...CVE-2022-25313Public exploitFix available6.5 Medium
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24052Fix available7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24051Fix available7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24050Fix available7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24048Fix available7.0 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow...CVE-2022-0585Fix available4.3 Medium
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsCVE-2021-4120Fix available8.2 High
- vim, vim vim/vim, apple macos +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-0629Fix available8.4 High
- Show moreLoading…