Skip to contentFedoraproject Fedora vulnerabilities
- eternal terminal project terminal, fedoraproject fedora +1 moreIn Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.CVE-2022-482575.3 Medium
- upx, fedoraproject fedora +1 moreUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cppCVE-2023-23457Fix available5.3 Medium
- upx, fedoraproject fedora +1 moreUpx: heap-buffer-overflow in packtmt::pack()CVE-2023-23456Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2022-47927Fix available5.5 Medium
- samba, fedoraproject fedora +1 moreA symlink following vulnerability was found in Samba, where a user can create a symbolic link...CVE-2022-3592Fix available6.5 Medium
- mediawiki, fedoraproject fedora +1 moreIn the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API...CVE-2023-22945Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22911Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22909Fix available5.3 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +2 more +4 more.NET Denial of Service VulnerabilityCVE-2023-21538Fix available7.5 High
- linux kernel, fedoraproject fedora +1 moreA use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux...CVE-2022-4379Fix available7.5 High
- vim, vim vim/vim, apple macos +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2023-0049Fix available7.3 High
- jnunemaker httparty, debian linux, fedoraproject fedora +2 morehttparty Multipart/Form-Data Request Tampering VulnerabilityCVE-2024-22049Fix available5.3 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- json5, fedoraproject fedora +1 morePrototype Pollution in JSON5 via Parse MethodCVE-2022-46175Public exploitFix available7.1 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...CVE-2022-43551Fix availableEPSS 16.6%7.5 High
- ffmpeg, debian linux, fedoraproject fedora +2 moreAn issue was discovered in the FFmpeg through 3.0. vp3_decode_frame in libavcodec/vp3.c lacks...CVE-2022-3109Fix available7.5 High
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap...CVE-2022-46393Fix available9.8 Critical
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access...CVE-2022-46392Fix available5.3 Medium
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46344Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46343Fix available8.8 High
- debian linux, fedoraproject fedora, the xorg project xorg-x11-server +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46342Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46341Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the...CVE-2022-46340Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function...CVE-2022-4283Fix available7.8 High
- pgadmin 4, fedoraproject fedora +1 morepgadmin4 vulnerable to Code InjectionCVE-2022-4223Fix availableEPSS 80.1%8.8 High
- fedoraproject fedora, openatom openeuler, openeuler 20.03 lts sp1 +2 more +4 moreAfter tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is...CVE-2021-33640Fix available6.2 Medium
- rxvt-unicode project rxvt-unicode, fedoraproject extra packages for enterprise linux, fedora +2 moreThe rxvt-unicode package is vulnerable to a remote code execution, in the Perl background...CVE-2022-4170Fix available9.8 Critical
- go standard library net/http, golang go, http2 +2 more +4 moreExcessive memory growth in net/http and golang.org/x/net/http2CVE-2022-41717Public exploitFix available5.3 Medium
- containers podman, fedoraproject fedora +1 moreBuildah (as part of Podman) vulnerable to Path TraversalCVE-2022-4123Fix available3.3 Low
- containers podman, fedoraproject fedora +1 moreBuildah (as part of Podman) vulnerable to Link FollowingCVE-2022-4122Fix available5.3 Medium
- gitpython-developers gitpython, debian linux, fedoraproject fedora +2 moreRemote Code Execution (RCE)CVE-2022-24439Public exploitFix available8.1 High
- awstats, debian linux, fedoraproject fedora +2 moreAWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:...CVE-2022-46391Fix available6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...CVE-2022-4907Fix available8.8 High
- capnproto capnp, capnproto, fedoraproject fedora +2 moreCap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list.CVE-2022-46149Fix available5.4 Medium
- qemu, fedoraproject fedora +1 moreAn integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization...CVE-2022-4172Fix available6.5 Medium
- qemu, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreAn out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The...CVE-2022-4144Fix available6.5 Medium
- gnu emacs, debian linux, fedoraproject fedora +2 moreGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name...CVE-2022-45939Fix available7.8 High
- linux layer 2 tunneling protocol, fedoraproject fedora, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when...CVE-2022-4129Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth...CVE-2022-45934Public exploitFix available7.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider libraryCVE-2022-45152Fix available9.1 Critical
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-4141Fix available7.3 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +1 more +3 moreMissing length validation of user displayname in nextcloud serverCVE-2022-393463.5 Low
- systemd project systemd, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresystemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a...CVE-2022-45873Fix available5.5 Medium
- qpress project qpress, fedoraproject fedora +1 moreqpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup...CVE-2022-458665.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle stored-XSS vulnerability in some "social" user profile fieldsCVE-2022-45151Fix available5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle reflected cross-site scripting vulnerability in policy toolCVE-2022-45150Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreCross-Site Request Forgery in MoodleCVE-2022-45149Fix available5.4 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 moreA logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.1 allows an...CVE-2022-44789Public exploitFix available8.8 High
- libarchive, debian linux, fedoraproject fedora +1 more +3 moreIn libarchive 3.6.1, the software does not check for an error after calling calloc function that...CVE-2022-36227Fix available9.8 Critical
- ruby-lang cgi, ruby, fedoraproject fedora +2 moreHTTP response splitting in CGICVE-2021-33621Fix available8.8 High
- Show moreLoading…