Skip to contentFedoraproject Fedora vulnerabilities
- linux kernel, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6...CVE-2023-1206Public exploitFix available5.7 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap-buffer-overflow in coders/tiff.cCVE-2023-3428Fix available6.2 Medium
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreServer-Side Request Forgery (SSRF) in plantuml/plantumlCVE-2023-3432Fix available7.2 High
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreImproper Access Control in plantuml/plantumlCVE-2023-3431Fix available5.3 Medium
- nodejs node, node.js, fedoraproject fedora +2 morellhttp vulnerable to HTTP request smugglingCVE-2023-30589Fix available7.5 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 moreArtifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the ...CVE-2023-36664Public exploitFix available7.8 High
- debian linux, openprinting cups, apple macos +1 more +3 moreCUPS vulnerable to use-after-free in cupsdAcceptClient()CVE-2023-34241Fix available5.3 Medium
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0CVE-2023-2911Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceededCVE-2023-2828Fix available7.5 High
- libreoffice, fedora, red hat enterprise linux 6 +4 more +6 moreArbitrary file writeCVE-2023-1183Fix availableEPSS 64.9%5.0 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- fedoraproject fedora, kubernetes +1 moreBypass of seccomp profile enforcementCVE-2023-2431Fix available3.4 Low
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in...CVE-2023-34475Fix available5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function...CVE-2023-34474Fix available5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an...CVE-2023-3195Fix available5.5 Medium
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: Configuration option to block the PUSH method in ATS didn't workCVE-2023-30631Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3217Fix availableEPSS 13.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3216Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3215Fix availableEPSS 13.8%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote...CVE-2023-3214Fix available8.8 High
- vmware tools, debian linux, fedoraproject fedora +2 moreVMware Tools Authentication Bypass VulnerabilityCVE-2023-20867In KEVFix availableEPSS 13.6%3.9 Low
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-...CVE-2023-3161Fix available5.5 Medium
- google grpc, fedoraproject fedora +1 moreDenial-of-Service in gRPCCVE-2023-32732Fix available5.3 Medium
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreCode injection via go command with cgo in cmd/goCVE-2023-29402Fix available9.8 Critical
- go standard library runtime, golang go, fedoraproject fedora +2 moreUnsafe behavior in setuid/setgid binaries in runtimeCVE-2023-29403Fix available7.8 High
- go toolchain cmd/go, golang go, fedoraproject fedora +1 more +3 moreImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/goCVE-2023-29405Fix available9.8 Critical
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreImproper handling of non-optional LDFLAGS in go command with cgo in cmd/goCVE-2023-29404Fix available9.8 Critical
- freedesktop dbus, debian linux, fedoraproject fedora +3 more +5 moreD-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged...CVE-2023-34969Fix available6.5 Medium
- yajl project yajl, debian linux, fedoraproject fedora +2 moreThere's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of...CVE-2023-33460Fix available6.5 Medium
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to...CVE-2023-3079In KEVPublic exploitFix availableEPSS 37.9%8.8 High
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...CVE-2023-34410Fix available5.3 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick. This security flaw causes a shell command injection...CVE-2023-34153Fix available7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick. This security flaw cause a remote code execution...CVE-2023-34152Public exploitFix available9.8 Critical
- imagemagick, debian linux, fedoraproject extra packages for enterprise linux +2 more +4 moreA vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of...CVE-2023-34151Fix available5.5 Medium
- usebottles bottles, fedoraproject fedora +1 moreBottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file.CVE-2023-229707.8 High
- c-ares, debian linux, fedoraproject fedora +2 more0-byte UDP payload DoS in c-aresCVE-2023-32067Fix available7.5 High
- c-ares, fedoraproject fedora +1 moreInsufficient randomness in generation of DNS query IDs in c-aresCVE-2023-31147Fix available5.9 Medium
- c-ares, debian linux, fedoraproject fedora +2 moreBuffer Underwrite in ares_inet_net_pton()CVE-2023-31130Fix available4.1 Medium
- c-ares, fedoraproject fedora +1 moreAutoTools does not set CARES_RANDOM_FILE during cross compilationCVE-2023-31124Fix available3.7 Low
- psf requests, fedoraproject fedora +1 moreUnintended leak of Proxy-Authorization header in requestsCVE-2023-32681Public exploitFix available6.1 Medium
- sysstat project sysstat, debian linux, fedoraproject fedora +2 moresysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c....CVE-2023-33204Fix available7.8 High
- haxx curl, apple macos, fedoraproject fedora +6 more +8 moreAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...CVE-2023-28322Fix available3.7 Low
- haxx curl, apple macos, debian linux +7 more +9 moreAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...CVE-2023-28321Fix available5.9 Medium
- libtiff, fedoraproject fedora, redhat enterprise linux +2 moreA NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff...CVE-2023-2731Fix available5.5 Medium
- linuxfoundation cups-filters, debian linux, fedoraproject fedora +2 moreCommand injection in cups-filtersCVE-2023-24805Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed...CVE-2023-2726Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who...CVE-2023-2725Fix availableEPSS 24.7%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to...CVE-2023-2724Fix availableEPSS 29.1%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who...CVE-2023-2723Fix availableEPSS 15.4%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a...CVE-2023-2722Fix available8.8 High
- Show moreLoading…