Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, fedoraproject fedora +1 moreUse after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to...CVE-2024-0224Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker...CVE-2024-0223Fix availableEPSS 10.2%8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who...CVE-2024-0222Fix available8.8 High
- packagekit project packagekit, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 morePackagekitd: use-after-free in idle function callbackCVE-2024-0217Fix available3.3 Low
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()CVE-2023-6693Fix available4.9 Medium
- latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 moreJwcrypto: denail of service via specifically crafted jweCVE-2023-6681Fix available5.3 Medium
- libaom, aomedia, fedoraproject fedora +2 moreheap buffer overflow in libaomCVE-2023-6879Fix available9.0 Critical
- sqlite, sqlite sqlite3, fedoraproject fedora +3 more +5 moreSQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflowCVE-2023-7104Fix available5.5 Medium
- douglas wilson spreadsheet::parseexcel, debian linux, fedoraproject fedora +1 more +3 moreArbitrary Code Execution (ACE) VulnerabilityCVE-2023-7101In KEVPublic exploitFix availableEPSS 19.0%7.8 High
- openbsd openssh, fedoraproject fedora, redhat enterprise linux +1 more +3 moreOpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for...CVE-2023-51767Fix availableDisputed7.0 High
- exim, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreExim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a...CVE-2023-51766Fix available5.3 Medium
- postfix, fedoraproject fedora, redhat enterprise linux +2 morePostfix through 3.8.4 allows SMTP smuggling unless configured with smtpd_data_restrictions...CVE-2023-51764Public exploitFix available5.3 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalationCVE-2023-6546Public exploitFix available7.0 High
- tats w3m, fedora extra packages for enterprise linux, fedora +2 moreW3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)CVE-2023-4255Fix available5.5 Medium
- broadcom tcpreplay, fedora extra packages for enterprise linux, fedora +2 moreTcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.cCVE-2023-4256Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreHeap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker...CVE-2023-7024In KEVPublic exploitFix available8.8 High
- libssh, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreLibssh: proxycommand/proxyjump features allow injection of malicious code through hostnameCVE-2023-6004Fix available4.8 Medium
- php, fedoraproject fedora +1 morePHP is vulnerable to the Marvin AttackCVE-2024-2408Fix available5.9 Medium
- libssh, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibssh: missing checks for return values for digestsCVE-2023-6918Fix available3.7 Low
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- google chrome, fedoraproject fedora, microsoft edge chromium +2 moreType confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to...CVE-2023-6702Public exploitFix availableEPSS 44.3%8.8 High
- redhat ansible, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAnsible: template injectionCVE-2023-5764Fix available7.1 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.cCVE-2023-6679Fix available5.5 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreLink targets allow arbitrary script executionCVE-2023-6186Fix available8.3 High
- libreoffice, debian linux, fedoraproject fedora +2 moreImproper input validation enabling arbitrary Gstreamer pipeline injectionCVE-2023-6185Fix available8.3 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: null pointer dereference vulnerability in nft_dynset_init()CVE-2023-6622Fix available5.5 Medium
- curl, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreWhen saving HSTS data to an excessively long file name, curl could end up
removing all contents,...CVE-2023-46219Fix available5.3 Medium
- curl, fedoraproject fedora, siemens ruggedcom rox mx5000 +14 more +16 moreThis flaw allows a malicious HTTP server to set "super cookies" in curl that
are then passed back...CVE-2023-46218Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a...CVE-2023-6512Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6511Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6510Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote...CVE-2023-6509Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker...CVE-2023-6508Fix available8.8 High
- apple ipados, iphone os, macos +4 more +6 moreBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...CVE-2023-45866Public exploitFix available6.3 Medium
- apple ipados, macos, safari +6 more +8 moreA memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...CVE-2023-42917In KEVFix available8.8 High
- apple ipados, macos, safari +6 more +8 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17...CVE-2023-42916In KEVFix availableEPSS 17.8%6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6351Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6350Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...CVE-2023-6345In KEVFix availableEPSS 16.5%9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...CVE-2023-6348Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6347Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to...CVE-2023-6346Fix available8.8 High
- perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 morePerl: write past buffer end via illegal user-defined unicode propertyCVE-2023-47038Fix available7.0 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: out-of-memory in tiffopen via a craft fileCVE-2023-6277Fix available6.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.cCVE-2023-5972Fix available7.0 High
- vim, fedoraproject fedora, neovim +1 more +3 moreVim has heap-use-after-free at /src/charset.c:1770:12 in skipwhiteCVE-2023-48706Fix available3.6 Low
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: nvme: memory corruption via unprivileged user passthroughCVE-2023-6238Fix available6.7 Medium
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- vim, fedoraproject fedora +1 moreUse-After-Free in win_close() in vimCVE-2023-48231Fix available3.9 Low
- vim, fedoraproject fedora +1 moreFloating point Exception in adjust_plines_for_skipcol() in vimCVE-2023-48232Fix available3.9 Low
- Show moreLoading…