Skip to contentFedoraproject Fedora vulnerabilities
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...CVE-2022-42012Fix available6.5 Medium
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...CVE-2022-42011Fix available6.5 Medium
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...CVE-2022-42010Fix available6.5 Medium
- isc dhcp, debian linux, fedoraproject fedora +2 moreDHCP memory leakCVE-2022-2929Fix available6.5 Medium
- isc dhcp, debian linux, fedoraproject fedora +2 moreAn option refcount overflow exists in dhcpdCVE-2022-2928Fix available6.5 Medium
- google protobuf-java, protocolbuffers, fedoraproject fedora +4 more +6 moreMemory handling vulnerability in ProtocolBuffers Java core and liteCVE-2022-3171Fix available4.3 Medium
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...CVE-2022-40617Fix available7.5 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle No groups filtering in H5P activity attempts reportCVE-2022-40316Fix available4.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Minor SQL injection risk in admin user browsingCVE-2022-40315Fix available9.8 Critical
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Stored Cross-site Scripting and page denial of serviceCVE-2022-40313Fix available7.1 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3352Fix available7.8 High
- php, debian linux, fedoraproject fedora +2 more$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesCVE-2022-31629Public exploitFix availableEPSS 49.6%6.5 Medium
- php, debian linux, fedoraproject fedora +2 morephar wrapper can occur dos when using quine gzip fileCVE-2022-31628Fix available2.3 Low
- webkitgtk, fedoraproject fedora +1 moreA use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8...CVE-2023-25358Fix available8.8 High
- lighttpd, fedoraproject fedora +1 moreA resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of...CVE-2022-41556Fix available7.5 High
- nheko-reborn nheko, fedoraproject fedora +1 morenheko vulnerable to secret poisoning using MITM on secret requests by the homeserverCVE-2022-39264Fix available8.6 High
- symfony twig, debian linux, drupal +1 more +3 moreTwig may load a template outside a configured directory when using the filesystem loaderCVE-2022-39261Fix available7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-3324Fix available7.8 High
- nlnet labs unbound, fedoraproject fedora +1 moreNRDelegation AttackCVE-2022-3204Fix available7.5 High
- joblib project joblib, debian linux, fedoraproject fedora +2 moreArbitrary Code ExecutionCVE-2022-21797Fix available7.3 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreUse After Free in vim/vimCVE-2022-3297Fix available7.8 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreStack-based Buffer Overflow in vim/vimCVE-2022-3296Fix available7.8 High
- kitty project kitty, fedoraproject fedora +1 moreIn Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can...CVE-2022-41322Fix available7.8 High
- nic knot resolver, debian linux, fedoraproject fedora +2 moreKnot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)...CVE-2022-40188Fix available7.5 High
- scala-lang scala, fedoraproject fedora, scala-lang scala-collection-compat +2 moreScala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserializationCVE-2022-36944Public exploitFix availableEPSS 11.0%9.8 Critical
- redis, fedoraproject fedora +1 moreRedis subject to Integer Overflow leading to Remote Code Execution via Heap OverflowCVE-2022-35951Fix available7.0 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vimCVE-2022-3278Fix available6.8 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vimCVE-2022-3256Fix available7.8 High
- google protobuf-cpp, protobuf-python, debian linux +1 more +3 moreOut of Memory issue in ProtocolBuffers for cpp and pythonCVE-2022-1941Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leaks in EdDSA DNSSEC verification codeCVE-2022-38178Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leak in ECDSA DNSSEC verification codeCVE-2022-38177Fix available7.5 High
- isc bind, fedoraproject fedora, isc bind9 +2 moreBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedlyCVE-2022-3080Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +1 more +3 moreProcessing large delegations may severely degrade resolver performanceCVE-2022-2795Fix available5.3 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte rangeCVE-2022-39958Fix available7.5 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept headerCVE-2022-39957Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding headerCVE-2022-39956Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type headerCVE-2022-39955Fix available7.3 High
- grafana, fedoraproject fedora +1 moreAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server adminCVE-2022-35957Fix available6.6 Medium
- apple ios, ipados, safari +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in...CVE-2022-32886Fix available8.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap buffer overflow issue was found in ImageMagick. When an application processes a malformed...CVE-2022-3213Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moredrivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive...CVE-2022-40768Fix available5.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3235Fix available7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-3234Fix available7.8 High
- adobe indesign, fedoraproject fedora +1 moreAdobe InDesign 2022 Out-of-Bound Read Memory leakCVE-2022-306745.5 Medium
- github cmark-gfm, fedoraproject fedora +1 moreUncontrolled Resource Consumption in cmark-gfmCVE-2022-39209Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105...CVE-2022-3201Fix available5.4 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote...CVE-2022-3200Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3199Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3198Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3197Fix available8.8 High
- Show moreLoading…