Skip to contentFedoraproject Fedora vulnerabilities
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function...CVE-2022-28042Fix available8.8 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an integer overflow via the function...CVE-2022-28041Fix available6.5 Medium
- e2fsprogs project e2fsprogs, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a...CVE-2022-1304Fix available7.8 High
- mutt, debian linux, fedoraproject fedora +2 moreBuffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3...CVE-2022-1328Fix available4.3 Medium
- composer, fedoraproject fedora, tenable tenable.sc +2 moreMissing input validation can lead to command execution in composerCVE-2022-24828Fix available8.3 High
- python, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...CVE-2015-20107Public exploitFix available7.6 High
- git-for-windows git, apple xcode, debian linux +1 more +3 moreUncontrolled search for the Git directory in Git for WindowsCVE-2022-24765Public exploitFix available6.0 Medium
- nokogiri, apple macos, debian linux +1 more +3 moreInefficient Regular Expression Complexity in NokogiriCVE-2022-24836Fix available7.5 High
- linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 morejbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use...CVE-2022-28796Fix available7.0 High
- lua, fedoraproject fedora +1 moresinglevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a...CVE-2022-28805Fix available9.1 Critical
- apple macos, mac os x, fedoraproject fedora +2 moreA cookie management issue was addressed with improved state management. This issue is fixed in...CVE-2022-22662Fix available6.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreCVE-2022-1158 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1158Fix available7.8 High
- async project async, fedoraproject fedora +1 morePrototype Pollution in asyncCVE-2021-43138Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26361Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26360Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26359Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26358Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morerace in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for...CVE-2022-26357Fix available7.0 High
- xen, debian linux, fedoraproject fedora +2 moreRacy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log...CVE-2022-26356Fix available5.6 Medium
- containers crun, fedoraproject fedora, redhat enterprise linux +1 more +3 moreImportant: container-tools:rhel8 security, bug fix, and enhancement updateCVE-2022-27650Fix available7.5 High
- twisted, debian linux, fedoraproject fedora +1 more +3 moreHTTP Request Smuggling in twisted.webCVE-2022-24801Fix available8.1 High
- htmldoc project htmldoc, fedoraproject fedora +1 moreIn HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer...CVE-2022-24191Fix available5.5 Medium
- moment, debian linux, fedoraproject fedora +2 more +4 morePath Traversal in Moment.jsCVE-2022-24785Public exploitFix availableEPSS 13.8%7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a...CVE-2022-28388Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moremcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a...CVE-2022-28389Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a...CVE-2022-28390Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreCVE-2022-1204 affecting package kernel for versions less than 5.15.82.1-1CVE-2022-1204Fix available5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn unauthorized access to the execution of the setuid file with capabilities flaw in the Linux...CVE-2021-3847Fix available7.8 High
- containers podman, fedoraproject fedora, redhat developer tools +11 more +13 morePodman's default inheritable capabilities for linux container not emptyCVE-2022-27649Fix available7.5 High
- buildah project buildah, fedoraproject fedora, redhat enterprise linux +2 moreNon-empty default inheritable capabilities for linux container in BuildahCVE-2022-27651Fix available6.8 Medium
- puma, debian linux, fedoraproject fedora +2 moreHTTP Request Smuggling in pumaCVE-2022-24790Fix available9.1 Critical
- mediawiki, debian linux, fedoraproject fedora +2 moreAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...CVE-2022-28202Fix available6.1 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreheap buffer overflow in get_one_sourceline in vim/vimCVE-2022-1160Fix available7.3 High
- vim, vim vim/vim, debian linux +2 more +4 moreUse after free in utf_ptr2char in vim/vimCVE-2022-1154Fix available7.8 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input...CVE-2022-1122Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +9 more +11 moreUse after Free in tc_new_tfilter allowing for privilege escalation in Linux KernelCVE-2022-1055Fix available8.6 High
- libarchive, fedoraproject fedora +1 moreLibarchive v3.6.0 was discovered to contain an out-of-bounds read via the component...CVE-2022-26280Fix available6.5 Medium
- linux kernel, fedoraproject fedora, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreCVE-2022-1015 affecting package kernel for versions less than 5.15.37.1-2CVE-2022-1015Public exploitFix available6.6 Medium
- gnu gcc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morelibiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as...CVE-2022-27943Fix available5.5 Medium
- broadcom tcpreplay, fedoraproject fedora +1 moretcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.CVE-2022-27942Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common...CVE-2022-27941Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.CVE-2022-27940Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.CVE-2022-27939Fix available5.5 Medium
- kiwix libkiwix, fedoraproject fedora +1 morelibkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search...CVE-2022-27920Fix available6.1 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 moreAn out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...CVE-2022-0995In KEVPublic exploitFix available7.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreSQL Injection in MoodleCVE-2022-0983Fix available8.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreA flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of...CVE-2022-0500Fix available7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreAn out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was...CVE-2021-4157Fix available8.0 High
- containerd imgcrypt, fedoraproject fedora +1 moreIncorrect Authorization in imgcryptCVE-2022-24778Fix available7.5 High
- powerdns authoritative server, recursor, fedoraproject fedora +2 moreIn PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and...CVE-2022-27227Fix available7.5 High
- Show moreLoading…