Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, fedoraproject fedora +1 moreOut of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...CVE-2023-1534Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...CVE-2023-1533Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote...CVE-2023-1532Fix available8.8 High
- chromium, google chrome, fedoraproject fedora +2 moreUse after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to...CVE-2023-1531Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to...CVE-2023-1530Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote...CVE-2023-1529Fix available9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...CVE-2023-1528Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42334Fix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42333Fix available8.6 High
- xen, debian linux, fedoraproject fedora +2 morex86 shadow plus log-dirty mode use-after-free In environments where host assisted address...CVE-2022-42332Fix available7.8 High
- fedoraproject fedora, xen +1 morex86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original...CVE-2022-42331Fix available5.5 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 moreA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...CVE-2023-27534Fix available8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...CVE-2023-27533Fix available8.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vimCVE-2023-1264Fix available6.6 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreIncorrect Calculation of Buffer Size in vim/vimCVE-2023-1175Fix available7.3 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2023-1170Fix available7.3 High
- vim, vim vim/vim, fedoraproject fedora +2 moreDivide By Zero in vim/vimCVE-2023-1127Fix available7.3 High
- sudo project sudo, fedoraproject fedora +1 moreSudo before 1.9.13p2 has a double free in the per-command chroot feature.CVE-2023-27320Fix available7.2 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem...CVE-2023-1073Fix available6.6 Medium
- fedoraproject fedora, red hat directory server +1 moreA flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the...CVE-2023-1055Fix available5.5 Medium
- gnome epiphany, fedoraproject fedora +1 moreIn Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating...CVE-2023-26081Fix available7.5 High
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- golang image, tiff, golang.org/x/image golang.org/x/image/tiff +1 more +3 moreDenial of service via crafted TIFF image in golang.org/x/image/tiffCVE-2022-41727Fix available5.5 Medium
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- c-ares, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...CVE-2022-4904Fix available8.6 High
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- postgresql, fedoraproject fedora, redhat enterprise linux +3 more +5 moreIn PostgreSQL, a modified, unauthenticated server can send an unterminated string during the...CVE-2022-41862Fix available3.7 Low
- palo alto networks cortex xsoar, fedoraproject fedora +1 moreCortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR ServerCVE-2023-00036.5 Medium
- x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 moreA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in...CVE-2023-0494Fix available7.8 High
- gnu less, fedoraproject fedora +1 moreIn GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences...CVE-2022-46663Fix available7.5 High
- harfbuzz project harfbuzz, fedoraproject fedora +1 morehb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via...CVE-2023-25193Fix available7.5 High
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...CVE-2023-25136Public exploitFix availableEPSS 89.8%6.5 Medium
- microsoft pesign, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in pesign. The pesign package provides a systemd service used to start the...CVE-2022-3560Fix available5.5 Medium
- gnu tar, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized...CVE-2022-48303Fix available5.5 Medium
- libtiff, fedoraproject fedora +1 moreLibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to...CVE-2022-4645Fix available6.8 Medium
- gnu binutils, fedoraproject fedora, redhat enterprise linux +2 moreAn illegal memory access flaw was found in the binutils package. Parsing an ELF file containing...CVE-2022-4285Fix available5.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119...CVE-2022-4926Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2023-0433Fix available7.8 High
- xiph opusfile, fedoraproject fedora +1 moreA null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile...CVE-2022-47021Fix available7.8 High
- sudo project sudo, apple macos, debian linux +1 more +3 moreIn Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...CVE-2023-22809Public exploitFix availableEPSS 55.4%7.8 High
- haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAn uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash...CVE-2023-0056Fix available6.5 Medium
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 morepgAdmin 4 Open Redirect vulnerabilityCVE-2023-22298Fix available6.1 Medium
- ruby-git, debian linux, fedoraproject fedora +2 moreCode injection in ruby gitCVE-2022-47318Fix available8.0 High
- samba, fedoraproject fedora +1 moreAn information leak vulnerability was discovered in Samba's LDAP server. Due to missing access...CVE-2018-14628Fix available4.3 Medium
- torproject tor, debian linux, fedoraproject fedora +2 moreThe SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol...CVE-2023-23589Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2023-0288Fix available7.3 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 moreImportant: kernel security and bug fix updateCVE-2023-0179Public exploitFix available7.8 High
- Show moreLoading…