Skip to contentFedoraproject Fedora vulnerabilities
- freerdp, fedoraproject fedora +1 moreMissing input length validation in `drive` channel in FreeRDPCVE-2022-41877Fix available4.6 Medium
- freerdp, fedoraproject fedora +1 moreMissing path sanitation with `drive` channel in FreeRDPCVE-2022-39347Fix available2.6 Low
- freerdp, fedoraproject fedora +1 moreHeap buffer overflow in urbdrc channelCVE-2022-39320Fix available5.5 Medium
- freerdp, fedoraproject fedora +1 moreMissing length validation in urbdrc channel in FreeRDPCVE-2022-39319Fix available4.6 Medium
- freerdp, fedoraproject fedora +1 moreDivision by zero in urbdrc channel in FreeRDPCVE-2022-39318Fix available4.8 Medium
- freerdp, fedoraproject fedora +1 moreOut of bounds read in zgfx decoder in FreeRDPCVE-2022-39317Fix available4.6 Medium
- freerdp, fedoraproject fedora +1 moreOut of bound read in FreeRDPCVE-2022-39316Fix available4.8 Medium
- fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 moreA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...CVE-2022-2601Fix available8.6 High
- gnome nautilus, fedoraproject fedora +1 moreGNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a...CVE-2022-37290Fix available5.5 Medium
- netatalk, debian linux, fedoraproject fedora +2 moreNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution...CVE-2022-45188Fix available7.8 High
- snakeyaml, fedoraproject fedora +1 moreStack Overflow in SnakeyamlCVE-2022-41854Fix available5.8 Medium
- invisible-island xterm, fedoraproject fedora +1 morexterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have...CVE-2022-45063Fix available9.8 Critical
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- xfce xfce4-settings, debian linux, fedoraproject fedora +2 moreIn Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection...CVE-2022-45062Fix available9.8 Critical
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- varnish-software varnish cache, varnish cache project cache, debian linux +2 more +4 moreAn HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x...CVE-2022-45060Fix available7.5 High
- varnish cache project cache, fedoraproject fedora +1 moreAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request...CVE-2022-45059Public exploitFix available7.5 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreNetlogon RPC Elevation of Privilege VulnerabilityCVE-2022-38023Fix available8.1 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos Elevation of Privilege VulnerabilityCVE-2022-37967Fix available7.2 High
- fedoraproject fedora, microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1 +16 more +18 moreWindows Kerberos RC4-HMAC Elevation of Privilege VulnerabilityCVE-2022-37966Fix available8.1 High
- debian linux, sysstat, fedoraproject fedora +2 moresysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflowCVE-2022-39377Fix available7.0 High
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c....CVE-2022-3821Fix available5.5 Medium
- apache commons bcel, fedoraproject fedora +1 moreApache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writingCVE-2022-42920Fix available9.8 Critical
- pixman, debian linux, fedoraproject fedora +2 moreIn libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer...CVE-2022-44638Fix available8.8 High
- python, fedoraproject fedora +1 morePython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...CVE-2022-42919Fix available7.8 High
- fluent fluentd, fedoraproject fedora +1 moreFluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)CVE-2022-39379Fix availableEPSS 45.0%3.1 Low
- apple ipados, macos, safari +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1,...CVE-2022-42824Fix available5.5 Medium
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS...CVE-2022-42823Fix available8.8 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS...CVE-2022-42799Fix available6.1 Medium
- fedoraproject fedora, xen +1 morex86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC...CVE-2022-42327Fix available7.1 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information...CVE-2022-42326Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information...CVE-2022-42325Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreOxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed...CVE-2022-42324Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record...CVE-2022-42323Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record...CVE-2022-42322Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for...CVE-2022-42321Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore...CVE-2022-42320Fix available7.0 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a...CVE-2022-42319Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42318Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42317Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42316Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42315Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42314Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42313Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42312Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42311Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a...CVE-2022-42310Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can...CVE-2022-42309Fix available8.8 High
- apereo phpcas, fedoraproject fedora +1 moreService Hostname Discovery Exploitation in phpCASCVE-2022-39369Fix available8.0 High
- fedoraproject fedora, nodejs node.js, openssl +9 more +11 moreX.509 Email Address Variable Length Buffer OverflowCVE-2022-3786Public exploitFix availableEPSS 92.5%7.5 High
- Show moreLoading…