Skip to contentFedoraproject Fedora vulnerabilities
- vim, fedoraproject fedora +1 moreVim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls...CVE-2024-22667Fix available7.8 High
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- debian linux, linux kernel, fedoraproject fedora +15 more +17 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2024-1086In KEVPublic exploitFix availableEPSS 28.1%7.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to...CVE-2024-1077Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to...CVE-2024-1060Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote...CVE-2024-1059Fix available8.8 High
- xen, fedoraproject fedora +1 moreVT-d: Failure to quarantine devices in !HVM buildsCVE-2023-46840Fix available4.1 Medium
- fedoraproject fedora, xen +1 morepci: phantom functions assigned to incorrect contextsCVE-2023-46839Fix available5.3 Medium
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: integer overflow in __vsyslog_internal()CVE-2023-6780Fix available5.3 Medium
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()CVE-2023-6779Fix available8.2 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: heap-based buffer overflow in __vsyslog_internal()CVE-2023-6246Public exploitFix available8.4 High
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversalCVE-2024-23334Public exploitFix availableEPSS 76.9%5.9 Medium
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separatorsCVE-2024-23829Fix available6.5 Medium
- debian linux, fedoraproject fedora, linux kernel +2 moreLinux: netback processing of zero-length transmit fragmentCVE-2023-46838Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an...CVE-2024-0811Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote...CVE-2024-0809Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85...CVE-2024-0804Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote...CVE-2024-0814Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who...CVE-2024-0813Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...CVE-2024-0806Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a...CVE-2024-0805Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a...CVE-2024-0812Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...CVE-2024-0808Fix available9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...CVE-2024-0807Fix available8.8 High
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out of bounds read when parsing mz binariesCVE-2023-40551Fix available5.1 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bound read in verify_buffer_sbat()CVE-2023-40550Fix available5.5 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read in verify_buffer_authenticode() malformed pe fileCVE-2023-40549Fix available6.2 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +12 more +14 moreShim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemsCVE-2023-40548Fix available7.4 High
- jupyter jupyterlab, notebook, fedoraproject fedora +2 morePotential authentication and CSRF tokens leak in JupyterLabCVE-2024-22421Fix available7.6 High
- jupyter jupyterlab, notebook, fedoraproject fedora +2 moreStored cross site scripting in Markdown Preview in JupyterLabCVE-2024-22420Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: nf_tables: pointer math issue in nft_byteorder_eval()CVE-2024-0607Fix available6.6 Medium
- google chrome, couchbase server, fedoraproject fedora +1 more +3 moreOut of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote...CVE-2024-0519In KEVPublic exploitFix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to...CVE-2024-0518Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to...CVE-2024-0517Fix availableEPSS 21.7%8.8 High
- rpm-software-management mock, fedora extra packages for enterprise linux, fedora +1 more +3 moreMock: privilege escalation for users that can access mock configurationCVE-2023-6395Fix available6.7 Medium
- gnu gnutls, debian linux, fedoraproject fedora +10 more +12 moreGnutls: rejects certificate chain with distributed trustCVE-2024-0567Fix available7.5 High
- gnu gnutls, fedoraproject fedora, red hat enterprise linux 6 +10 more +12 moreGnutls: incomplete fix for cve-2023-5981CVE-2024-0553Fix available7.5 High
- x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 moreXorg-x11-server: selinux context corruptionCVE-2024-0409Fix available7.8 High
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreXorg-x11-server: selinux unlabeled glx pbufferCVE-2024-0408Fix available5.5 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +20 more +22 moreXorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accessCVE-2024-0229Fix available7.8 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 moreXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerCVE-2023-6816Fix available9.8 Critical
- sqlite, fedoraproject extra packages for enterprise linux, fedora +9 more +11 moreSqlite: use-after-free bug in jsonparseaddnodearrayCVE-2024-0232Fix available4.7 Medium
- relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y...CVE-2024-23301Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.CVE-2024-0443Fix available5.5 Medium
- gnu grub2, fedoraproject fedora, red hat enterprise linux 8 +4 more +6 moreGrub2: bypass the grub password protection featureCVE-2023-4001Fix available6.8 Medium
- redis, fedoraproject fedora +1 moreRedis vulnerable to integer overflow in certain payloadsCVE-2023-41056Fix available8.1 High
- google chrome, fedoraproject fedora +1 moreInsufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an...CVE-2024-0333Fix available5.3 Medium
- freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 moreIpa: invalid csrf protectionCVE-2023-5455Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 moreKernel: aoe: improper reference count leads to use-after-free vulnerabilityCVE-2023-6270Fix available7.0 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to...CVE-2024-0225Fix available8.8 High
- Show moreLoading…