Skip to contentFedoraproject Fedora vulnerabilities
- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vimCVE-2022-2862Fix available7.6 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2022-2849Fix available7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreImproper Validation of Specified Quantity in Input in vim/vimCVE-2022-2845Fix available7.8 High
- qemu, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreAn infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the...CVE-2020-14394Fix available3.2 Low
- tats w3m, fedoraproject fedora +1 moreThere is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered...CVE-2022-38223Fix available7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2022-2819Fix available7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vimCVE-2022-2817Fix available7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vimCVE-2022-2816Fix available7.8 High
- varnish cache project cache, fedoraproject fedora +1 moreIn Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to...CVE-2022-38150Fix available7.5 High
- postgresql, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in postgresql. On this security issue an attack requires permission to...CVE-2022-2625Fix available8.0 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper HTTP/2 scheme and method validationCVE-2022-31779Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper input validation on HTTP/2 headersCVE-2022-25763Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreHTTP/2 framing vulnerabilitiesCVE-2022-31780Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreInsufficient Validation of HTTP/1.x HeadersCVE-2022-28129Fix available7.5 High
- apache traffic server, debian linux, fedoraproject fedora +2 moreProtocol vs scheme mismatchCVE-2021-37150Fix available7.5 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreIn ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was...CVE-2022-2719Fix available5.5 Medium
- exim, fedoraproject fedora +1 moreExim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is...CVE-2022-37451Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who...CVE-2022-2624Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote...CVE-2022-2623Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to...CVE-2022-2622Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who...CVE-2022-2621Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote...CVE-2022-2620Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79...CVE-2022-2619Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79...CVE-2022-2618Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who...CVE-2022-2617Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an...CVE-2022-2616Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a...CVE-2022-2615Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker...CVE-2022-2614Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote...CVE-2022-2613Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreSide-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79...CVE-2022-2612Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79...CVE-2022-2611Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79...CVE-2022-2610Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a...CVE-2022-2609Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a...CVE-2022-2608Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote...CVE-2022-2607Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote...CVE-2022-2606Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to...CVE-2022-2605Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker...CVE-2022-2604Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to...CVE-2022-2603Fix available8.8 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreThe th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory,...CVE-2021-33646Fix available7.5 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreThe th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory,...CVE-2021-33645Fix available7.5 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreAn attacker who submits a crafted tar file with size in header struct being 0 may be able to...CVE-2021-33644Fix available8.1 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreAn attacker who submits a crafted tar file with size in header struct being 0 may be able to...CVE-2021-33643Fix available9.1 Critical
- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...CVE-2022-37434Public exploitFix availableEPSS 19.2%9.8 Critical
- pgjdbc, postgresql jdbc driver, debian linux +1 more +3 moreSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbcCVE-2022-31197Fix available7.1 High
- samba rsync, fedoraproject fedora +1 moreAn issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write...CVE-2022-29154Public exploitFix available7.4 High
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by updating almost expired delegation informationCVE-2022-30699Fix available6.5 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by introducing subdomain delegationsCVE-2022-30698Fix available6.5 Medium
- gnu gnutls, debian linux, fedoraproject fedora +4 more +6 moreA vulnerability found in gnutls. This security flaw happens because of a double free error occurs...CVE-2022-2509Fix available7.5 High
- rust-websocket project rust-websocket, fedoraproject fedora +1 moreMemory allocation based on untrusted length in rust-websocketCVE-2022-35922Fix available7.5 High
- Show moreLoading…