Skip to contentFedoraproject Fedora vulnerabilities
- fedora, red hat 3scale api management platform 2, rmagick +2 moreDraw while calling getdrawinfo()CVE-2023-5349Fix available5.3 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: mod_macro buffer over-readCVE-2023-31122Fix available7.5 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare2CVE-2023-56865.1 Medium
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTCVE-2023-45802Public exploitFix available5.9 Medium
- redis, debian linux, fedoraproject fedora +2 moreRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.CVE-2023-45145Fix available3.6 Low
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 moreStored XSS vulnerability in RoundcubeCVE-2023-5631In KEVFix availableEPSS 76.3%6.1 Medium
- nodejs node, node.js, fedoraproject fedora +2 moreVarious `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In...CVE-2023-39332Fix available9.8 Critical
- nodejs node, node.js, fedoraproject fedora +2 moreWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...CVE-2023-38552Fix available7.5 High
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2023-22084Fix available4.9 Medium
- python urllib3, fedoraproject fedora +1 moreRequest body not stripped after redirect in urllib3CVE-2023-45803Fix available4.2 Medium
- apache traffic server, fedoraproject fedora +1 moreApache Traffic Server: Malformed http/2 frames can cause an abortCVE-2023-39456Fix availableEPSS 58.3%7.5 High
- apache traffic server, fedoraproject fedora +1 moreApache Traffic Server: s3_auth plugin problem with hash calculationCVE-2023-41752Fix available7.5 High
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race...CVE-2023-41914Fix available7.0 High
- wordpress, fedoraproject fedora +1 moreWordPress < 6.3.2 is vulnerable to Broken Access ControlCVE-2023-39999Fix available4.3 Medium
- nodejs undici, fedoraproject fedora +1 moreUndici's cookie header not cleared on cross-origin redirect in fetchCVE-2023-45143Fix available3.9 Low
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a...CVE-2023-5484Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5475Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an...CVE-2023-5487Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote...CVE-2023-5218Fix available8.8 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreUse After Free in vim/vimCVE-2023-5535Fix available7.8 High
- go standard library net/http, golang go, http2 +4 more +6 moreHTTP/2 rapid reset can cause excessive work in net/httpCVE-2023-39325Public exploitFix available7.5 High
- hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 moreHCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3CVE-2023-37536Fix available8.2 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- curl, fedoraproject fedora, haxx libcurl +15 more +17 moreThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is...CVE-2023-38545Public exploitFix availableEPSS 78.3%9.8 Critical
- element-hq synapse, fedoraproject fedora +1 morematrix-synapse vulnerable to denial of service due to malicious server ACL eventsCVE-2023-45129Fix available4.9 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc busy rpc multiple listener dosCVE-2023-42670Fix available6.5 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissionsCVE-2023-4091Fix available6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()CVE-2023-39194Fix available3.2 Low
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables sctp out-of-bounds read in match_flags()CVE-2023-39193Fix available6.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables out-of-bounds read in u32_match_it()CVE-2023-39192Fix available6.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()CVE-2023-39189Fix available5.1 Medium
- lipnitsk libcue, debian linux, fedoraproject fedora +2 morelibcue vulnerable to out-of-bounds array accessCVE-2023-43641Fix availableEPSS 17.1%8.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap use-after-free in coders/bmp.cCVE-2023-5341Fix available6.2 Medium
- arm mbed tls, fedoraproject fedora, mbed mbedtls +2 moreMbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.CVE-2023-43615Fix available7.5 High
- facebook tac plus, fedoraproject fedora +1 moreA lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent…CVE-2023-45239Public exploit9.8 Critical
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreArbitrary code execution during build via line directives in cmd/goCVE-2023-39323Fix available8.1 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vimCVE-2023-5441Fix available6.2 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()CVE-2023-42754Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: ebpf: insufficient stack type checks in dynptrCVE-2023-39191Fix available8.2 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial-of-service in django.utils.text.TruncatorCVE-2023-43665Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to...CVE-2023-5346Fix available8.8 High
- linux kernel, fedoraproject fedora +1 moreUse-after-free in Linux kernel's fs/smb/client componentCVE-2023-5345Fix available7.8 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- libxpm project libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read on xpm with corrupted colormapCVE-2023-43789Fix available5.5 Medium
- x.org libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read in xpmcreatexpmimagefrombuffer()CVE-2023-43788Fix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflowCVE-2023-43787Fix available7.8 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()CVE-2023-43786Public exploitFix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()CVE-2023-43785Fix available6.5 Medium
- python urllib3, debian linux, fedoraproject fedora +2 more`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804Public exploitFix available5.9 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2023-5344Fix available4.0 Medium
- Show moreLoading…