Skip to contentFedoraproject Fedora vulnerabilities
- protobuf-c project protobuf-c, fedoraproject fedora +1 moreProtobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function...CVE-2022-33070Fix available5.5 Medium
- harfbuzz project harfbuzz, fedoraproject fedora +1 moreAn integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers...CVE-2022-33068Fix available5.5 Medium
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed...CVE-2022-4917Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a...CVE-2022-2165Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an...CVE-2022-2164Fix available6.3 Medium
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreUse after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an...CVE-2022-2163Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0...CVE-2022-2162Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote...CVE-2022-2161Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53...CVE-2022-2160Fix available6.5 Medium
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreType confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to...CVE-2022-2158Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote...CVE-2022-2157Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to...CVE-2022-2156Fix available8.8 High
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- vim, vim vim/vim, debian linux +1 more +3 moreOut-of-bounds Write in vim/vimCVE-2022-2129Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Read in vim/vimCVE-2022-2126Fix available7.8 High
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-2125Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreBuffer Over-read in vim/vimCVE-2022-2124Fix available7.8 High
- imagemagick, fedoraproject fedora, redhat enterprise linux +2 moreIn ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte...CVE-2022-32547Fix available7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick, causing an outside the range of representable values of...CVE-2022-32546Fix available7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick, causing an outside the range of representable values of...CVE-2022-32545Fix available7.8 High
- artifex ghostscript, fedoraproject fedora +1 moreA NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to...CVE-2022-2085Fix available5.5 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +12 more +14 more.NET and Visual Studio Information Disclosure VulnerabilityCVE-2022-30184Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreModerate: kernel-rt security and bug fix updateCVE-2022-21166Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreIncomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an...CVE-2022-21125Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreIncomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an...CVE-2022-21123Fix available5.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...CVE-2022-2011Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote...CVE-2022-2010Fix available9.3 Critical
- google chrome, fedoraproject fedora +1 moreDouble free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...CVE-2022-2008Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to...CVE-2022-2007Fix available8.8 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 moreA crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An...CVE-2021-3695Fix available4.5 Medium
- mechanize project mechanize, fedoraproject fedora +1 moreAuthorization header leak in rubygem MechanizeCVE-2022-31033Fix available5.9 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in...CVE-2022-26362Fix available6.4 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to...CVE-2022-26364Fix available6.7 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to...CVE-2022-26363Fix available6.7 Medium
- debian linux, firejail project firejail, fedoraproject fedora +2 moreA Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a...CVE-2022-31214Fix available7.8 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813Public exploitFix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreInformation Disclosure in mod_lua with websocketsCVE-2022-30556Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of serviceCVE-2022-30522Fix availableEPSS 89.9%7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebodyCVE-2022-29404Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()CVE-2022-28615Fix available9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()CVE-2022-28614Fix available5.3 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smugglingCVE-2022-26377Public exploitFix availableEPSS 21.1%7.5 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +4 more +6 moreCVE-2022-1973 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1973Fix available7.1 High
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Write in vim/vimCVE-2022-2000Fix available7.8 High
- jmespath, fedoraproject fedora +1 moreJMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferableCVE-2022-32511Fix available9.8 Critical
- kubernetes cri-o, fedoraproject fedora, redhat enterprise linux +1 more +3 moreNode DOS by way of memory exhaustion through ExecSync request in CRI-OCVE-2022-1708Fix available7.5 High
- containerd, debian linux, fedoraproject fedora +2 morecontainerd CRI plugin: Host memory exhaustion through ExecSyncCVE-2022-31030Fix available5.5 Medium
- emicklei emicklei/go-restful, go-restful project go-restful, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in emicklei/go-restfulCVE-2022-1996Fix available9.3 Critical
- cookiecutter project cookiecutter, fedoraproject fedora +1 moreCommand InjectionCVE-2022-24065Fix available8.1 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 morenet/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to...CVE-2022-32250Public exploitFix available7.8 High
- Show moreLoading…