Skip to contentFedoraproject Fedora vulnerabilities
- openssl, fedoraproject fedora, netapp clustered data ontap +10 more +12 moreX.509 Email Address 4-byte Buffer OverflowCVE-2022-3602Public exploitFix availableEPSS 90.8%7.5 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreImportant: virt:rhel and virt-devel:rhel security and bug fix updateCVE-2022-40284Fix available7.8 High
- opendev sushy-tools, virtualbmc, fedoraproject fedora +2 moreOpenStack Sushy-Tools and VirtualBMC Improper Preservation of PermissionsCVE-2022-44020Fix available5.5 Medium
- keylime, fedoraproject fedora, redhat enterprise linux +2 moreKeylime: unhandled exceptions could lead to invalid attestation statesCVE-2022-3500Fix available5.1 Medium
- wireshark, fedoraproject fedora +1 moreCrash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via...CVE-2022-3725Fix available6.3 Medium
- samba, fedoraproject fedora +1 moreCVE-2022-3437 affecting package samba 4.12.5-7CVE-2022-3437Fix available6.5 Medium
- samba, fedoraproject fedora +1 moreA flaw was found in samba. A race condition in the password lockout code may lead to the risk of...CVE-2021-20251Fix available5.9 Medium
- haxx curl, apple macos, fedoraproject fedora +4 more +6 moreIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...CVE-2022-42916Fix available7.5 High
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- jupyter core, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in JupyterAppCVE-2022-39286Fix available8.8 High
- unspecified vim, debian linux, fedoraproject fedora +1 more +3 morevim autocmd quickfix.c qf_update_buffer use after freeCVE-2022-3705Fix available5.0 Medium
- opensvc multipath-tools, debian linux, fedoraproject fedora +2 moremultipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as...CVE-2022-41974Fix available7.8 High
- opensvc multipath-tools, debian linux, fedoraproject fedora +2 moremultipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as...CVE-2022-41973Fix available7.8 High
- libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 moreIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...CVE-2022-43680Public exploitFix available7.5 High
- gnu libtasn1, debian linux, fedoraproject fedora +3 more +5 moreGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...CVE-2021-46848Fix available9.1 Critical
- debian linux, extended keccak code package project keccak code package, fedoraproject fedora +9 more +11 moreBuffer overflow in sponge queue functionsCVE-2022-37454Fix available9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after freeCVE-2022-3640Fix available5.5 Medium
- exim, fedoraproject fedora +1 moreExim DMARC dmarc.c dmarc_dns_lookup use after freeCVE-2022-3620Fix available5.6 Medium
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41742CVE-2022-41742Fix available7.1 High
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41741CVE-2022-41741Public exploitFix available7.0 High
- git, apple xcode, debian linux +1 more +3 moreGit vulnerable to Remote Code Execution via Heap overflow in `git shell`CVE-2022-39260Fix available8.5 High
- git, apple xcode, debian linux +1 more +3 moreGit subject to exposure of sensitive information via local clone of symbolic linksCVE-2022-39253Public exploitFix available5.5 Medium
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-39399Fix available3.7 Low
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21628Fix available5.3 Medium
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21626Fix available5.3 Medium
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21624Fix available3.7 Low
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21619Fix available3.7 Low
- oracle graalvm, azul zulu, fedoraproject fedora +12 more +14 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21618Fix available5.3 Medium
- fedoraproject supybot-fedorasupybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS....CVE-2020-158535.3 Medium
- jhead project jhead, debian linux, fedoraproject fedora +2 moreJhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG...CVE-2022-41751Fix available7.8 High
- exim, fedoraproject fedora +1 moreExim Regex use after freeCVE-2022-3559Fix available4.6 Medium
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c ProcXkbGetKbdByName memory leakCVE-2022-3551Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c _GetCountedString buffer overflowCVE-2022-3550Fix available5.5 Medium
- isaacs minimatch, debian linux, fedoraproject fedora +2 moreminimatch ReDoS vulnerabilityCVE-2022-3517Fix available7.5 High
- qemu, fedoraproject fedora +1 moreAn integer underflow issue was found in the QEMU VNC server while processing ClientCutText...CVE-2022-3165Fix available6.5 Medium
- jasper project jasper, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in jasper. This security vulnerability happens because of a memory leak bug...CVE-2022-2963Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreIn the Linux kernel 5.8 through 5.19.14, local attackers able to inject WLAN frames into the...CVE-2022-42722Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19...CVE-2022-42721Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreVarious refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1...CVE-2022-42720Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2...CVE-2022-42719Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreAn issue was discovered in the Linux kernel through 5.19.11. Attackers able to inject WLAN frames...CVE-2022-41674Fix available8.1 High
- freerdp, fedoraproject fedora +1 moreFreeRDP may read and display out of bounds dataCVE-2022-39283Fix available5.9 Medium
- freerdp, fedoraproject fedora +1 moreRDP client: Read of uninitialized memory with parallel port redirectionCVE-2022-39282Fix available3.5 Low
- fedoraproject fedora, microsoft .net, .net 6.0 +10 more +12 moreNuGet Client Elevation of Privilege VulnerabilityCVE-2022-41032Public exploitFix available7.8 High
- debian linux, fedoraproject fedora, xen +2 morelock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call...CVE-2022-33748Fix available5.6 Medium
- debian linux, fedoraproject fedora, xen +2 moreArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing...CVE-2022-33747Fix available3.8 Low
- debian linux, fedoraproject fedora, xen +2 moreP2M pool freeing may take excessively long The P2M pool backing second level address translation...CVE-2022-33746Fix available6.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreMacro URL arbitrary script executionCVE-2022-3140Fix available6.3 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel IPv4 fib_semantics.c fib_nh_match out-of-boundsCVE-2022-3435Fix available4.3 Medium
- puppet puppetlabs-apt, fedoraproject fedora, puppet puppetlabs-mysql +2 morePuppetlabs-apt Command InjectionCVE-2022-3275Fix available8.4 High
- Show moreLoading…