Skip to contentFedoraproject Fedora vulnerabilities
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: vnc: infinite loop in inflate_buffer() leads to denial of serviceCVE-2023-3255Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- certifi, certifi python-certifi, fedoraproject fedora +6 more +8 moreCertifi's removal of e-Tugra root certificateCVE-2023-37920Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file writeCVE-2023-13863.3 Low
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connectionsCVE-2023-38200Fix available7.5 High
- gnome librsvg, debian linux, fedoraproject fedora +2 moreA directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local...CVE-2023-38633Fix available5.5 Medium
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: memory leak in tiffcrop.cCVE-2023-3576Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +2 moreKeylime: attestation failure when the quote's signature does not validateCVE-2023-3674Fix available2.3 Low
- openbsd openssh, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...CVE-2023-38408Public exploitFix availableEPSS 79.7%9.8 Critical
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosureCVE-2023-34968Fix available5.3 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlightCVE-2023-34967Fix availableEPSS 61.2%5.3 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: infinite loop in mdssvc rpc service for spotlightCVE-2023-34966Fix availableEPSS 62.4%7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 moreSamba: smb2 packet signing is not enforced when "server signing = required" is setCVE-2023-3347Fix available5.9 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: out-of-bounds read in winbind auth_crapCVE-2022-2127Fix available5.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2023-22058Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ...CVE-2023-22057Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2023-22056Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2023-22054Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). ...CVE-2023-22053Fix available5.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). ...CVE-2023-22048Fix available3.1 Low
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2023-22046Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2023-22038Fix available2.7 Low
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2023-22033Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2023-22008Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ...CVE-2023-22005Fix available4.4 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossibility of deadlock in libbpf function sock_hash_delete_elemCVE-2023-0160Fix available4.7 Medium
- es iperf3, apple macos, debian linux +3 more +5 moreiperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted...CVE-2023-38403Fix available7.5 High
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.cCVE-2023-38253Fix available4.7 Medium
- tats w3m, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in strnew_size() at w3m/str.cCVE-2023-38252Fix available4.7 Medium
- redis, fedoraproject fedora +1 moreHeap overflow issue with the Lua cjson library used by RedisCVE-2022-24834Public exploitFix availableEPSS 41.4%7.0 High
- qt, fedoraproject fedora +1 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6...CVE-2023-38197Fix available7.5 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: netlink socket crash (null pointer deref) in netlink_dump functionCVE-2023-3106Fix available6.6 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- redis, fedoraproject fedora +1 moreHeap overflow in COMMAND GETKEYS and ACL evaluation in RedisCVE-2023-36824Fix availableEPSS 77.4%7.4 High
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +6 more +8 moreASP.NET and Visual Studio Security Feature Bypass VulnerabilityCVE-2023-33170Fix available8.1 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.cCVE-2023-34432Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.cCVE-2023-34318Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.cCVE-2023-32627Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.cCVE-2023-26590Fix available6.2 Medium
- tang project tang, fedora, red hat enterprise linux 7 +3 more +5 moreRace condition exists in the key generation and rotation functionalityCVE-2023-1672Fix available5.3 Medium
- yt-dlp, fedoraproject fedora, youtube-dlc project youtube-dlc +1 more +3 moreyt-dlp File Downloader cookie leakCVE-2023-35934Fix available6.1 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreLinux Kernel nftables Out-Of-Bounds Read/Write VulnerabilityCVE-2023-35001Public exploitFix available7.8 High
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalCVE-2023-3269Public exploitFix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux Kernel nftables Use-After-Free Local Privilege Escalation VulnerabilityCVE-2023-31248Fix available7.8 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidatorCVE-2023-36053Fix available7.5 High
- Show moreLoading…