Skip to contentFedoraproject Fedora vulnerabilities
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in function find_next_quote in vim/vimCVE-2022-1629Fix available6.6 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap buffer overflow in vim_strncpy find_word in vim/vimCVE-2022-1621Fix available7.3 High
- vim, vim vim/vim, apple macos +1 more +3 moreNULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vimCVE-2022-1620Fix available6.6 Medium
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vimCVE-2022-1619Fix available6.1 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse after free in append_command in vim/vimCVE-2022-1616Fix available7.3 High
- ecdsautils project ecdsautils, debian linux, fedoraproject fedora +2 moreTrivial signature forgery in ecdsautilsCVE-2022-24884Fix available10.0 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 moreA logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...CVE-2022-27337Fix available6.5 Medium
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information...CVE-2022-29500Fix available8.8 High
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of...CVE-2022-29501Fix available8.8 High
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of...CVE-2022-29502Fix available9.8 Critical
- keylime, fedoraproject fedora +1 moreTenant and Verifier might not use the same registrar dataCVE-2022-1053Fix available9.1 Critical
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslogCVE-2022-24903Public exploitFix available8.1 High
- squirrel-lang squirrel, fedoraproject fedora +1 morethread_call in sqbaselib.cpp in SQUIRREL 3.2 lacks a certain sq_reservestack call.CVE-2022-30292Public exploitFix available10.0 Critical
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20796Fix available6.5 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022CVE-2022-20785Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20771Fix available7.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022CVE-2022-20770Fix available8.6 High
- fedoraproject fedora, libsdl sdl ttf +1 moreSDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function...CVE-2022-27470Fix available7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreTcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The...CVE-2022-28487Fix available7.5 High
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...CVE-2022-29824Fix available6.5 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- debian linux, tuxera ntfs-3g, fedoraproject fedora +2 morentfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2....CVE-2021-46790Fix available7.8 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c...CVE-2022-29968Public exploitFix available7.8 High
- angular, angularjs, fedoraproject fedora +1 more +3 moreRegular Expression Denial of Service (ReDoS)CVE-2022-25844Fix available5.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMissing authorization in MoodleCVE-2022-0984Fix available4.3 Medium
- podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 morePodman publishes a malicious image to public registriesCVE-2022-1227Public exploitFix available8.8 High
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +2 more +4 moreA flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not...CVE-2021-3839Fix available7.5 High
- samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...CVE-2022-29869Fix available5.3 Medium
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreA Malformed Lua script can crash RedisCVE-2022-24736Fix available3.3 Low
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreLua scripts can be manipulated to overcome ACL rules in RedisCVE-2022-24735Fix available3.9 Low
- chafa project chafa, hpjansson hpjansson/chafa, fedoraproject fedora +2 morechafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafaCVE-2022-1507Fix available5.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...CVE-2022-27239Fix available7.8 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Server authentication might allow invalid credentials to passCVE-2022-24883Fix available7.4 High
- freerdp, fedoraproject extra packages for enterprise linux, fedora +2 moreServer side NTLM does not properly check parameters in FreeRDPCVE-2022-24882Fix available9.1 Critical
- giflib project giflib, fedoraproject fedora +1 moreThere is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.CVE-2022-28506Fix available5.5 Medium
- freetype, fedoraproject fedora +1 moreFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation...CVE-2022-27406Fix available7.5 High
- freetype, fedoraproject fedora +1 moreFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation...CVE-2022-27405Fix available7.5 High
- freetype, fedoraproject fedora +1 moreFreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer...CVE-2022-27404Fix available9.8 Critical
- vim, vim vim/vim, apple macos +1 more +3 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-1420Fix available6.8 Medium
- gnome epiphany, debian linux, fedoraproject fedora +2 moreIn GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer...CVE-2022-29536Fix available7.5 High
- golang go, fedoraproject extra packages for enterprise linux, fedora +2 moreThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...CVE-2022-28327Fix available7.5 High
- golang go, fedoraproject fedora, netapp kubernetes monitoring operator +2 moreencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...CVE-2022-24675Public exploitFix available7.5 High
- git, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreCommand InjectionCVE-2022-25648Fix available8.1 High
- hashicorp consul, fedoraproject fedora +1 moreHashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vectorCVE-2022-29153Fix available7.5 High
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.CVE-2021-42778Fix available5.3 Medium
- kubernetes cri-o, mobyproject moby, fedoraproject fedora +1 more +3 moreIncorrect Default Permissions in CRI-OCVE-2022-27652Fix available5.3 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreglobal heap buffer overflow in skip_range in vim/vimCVE-2022-1381Fix available7.8 High
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreXSS via Embedded SVG in SVG Diagram Format in plantuml/plantumlCVE-2022-1231Fix available9.3 Critical
- stb project stb, fedoraproject fedora +1 moreSTB v2.27 was discovered to contain an integer shift of invalid size in the component...CVE-2022-28048Fix available8.8 High
- Show moreLoading…