Skip to contentFedoraproject Fedora vulnerabilities
- google chrome, fedoraproject fedora +1 moreUse after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...CVE-2024-2886Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...CVE-2024-2885Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...CVE-2024-2883Fix available8.8 High
- wireshark, fedoraproject fedora +1 moreMismatched Memory Management Routines in WiresharkCVE-2024-2955Fix available7.8 High
- apache commons configuration, fedoraproject fedora, netapp ontap tools +1 more +3 moreApache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()CVE-2024-29131Fix available7.3 High
- apache commons configuration, fedoraproject fedora +1 moreApache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object treeCVE-2024-29133Fix available5.4 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote...CVE-2024-2631Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote...CVE-2024-2630Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...CVE-2024-2629Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a...CVE-2024-2628Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...CVE-2024-2627Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote...CVE-2024-2626Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreObject lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...CVE-2024-2625Fix availableEPSS 21.4%8.8 High
- latchset jose, fedoraproject fedora +1 morelatchset jose through version 11 allows attackers to cause a denial of service (CPU consumption)...CVE-2023-50967Fix available7.5 High
- libdwarf project libdwarf, fedoraproject fedora, red hat enterprise linux 7 +2 more +4 moreLibdwarf: crashes randomly on fuzzed objectCVE-2024-2002Fix available7.5 High
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: WebSocket DoS with incomplete closing handshakeCVE-2024-23672Fix available6.3 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: HTTP/2 header handling DoSCVE-2024-24549Public exploitFix availableEPSS 23.1%7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote...CVE-2024-2400Fix available8.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreNull Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to...CVE-2023-43279Fix available6.5 Medium
- xen, fedoraproject fedora +1 morex86: shadow stack vs exceptions from emulation stubsCVE-2023-46841Fix available6.5 Medium
- libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 morelibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...CVE-2024-28757Public exploitFix available7.5 High
- kozea weasyprint, fedoraproject fedora +1 moreWeasyPrint allows the attachment of arbitrary files and URLs to a PDFCVE-2024-28184Fix available7.4 High
- apple ipados, macos, safari +9 more +11 moreA logic issue was addressed with improved validation. This issue is fixed in tvOS 17.4, macOS...CVE-2024-23263Fix available6.5 Medium
- apple ios, ipados, macos +9 more +11 moreAn injection issue was addressed with improved validation. This issue is fixed in Safari 17.4,...CVE-2024-23280Fix available6.5 Medium
- apple macos, safari, tvos +8 more +10 moreThe issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma...CVE-2024-23254Fix available6.5 Medium
- apple ipados, macos, safari +8 more +10 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 17.4,...CVE-2024-23284Fix available6.5 Medium
- fedoraproject fedora, go-jose +1 moreGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180Fix available4.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreUnsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4CVE-2024-2044Public exploitFix availableEPSS 79.5%9.9 Critical
- appsup-dart jose, fedoraproject fedora +1 morejose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintextCVE-2024-28176Fix available4.9 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreDenial of service when trimming EDE text on positive repliesCVE-2024-1931Fix available7.5 High
- squid-cache squid, fedoraproject fedora, netapp bluexp +2 moreSQUID-2024:1 Denial of Service in HTTP Chunked DecodingCVE-2024-25111Fix availableEPSS 65.3%8.6 High
- google chrome, fedoraproject fedora +1 moreUse after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to...CVE-2024-2176Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...CVE-2024-2174Fix availableEPSS 12.7%8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote...CVE-2024-2173Fix availableEPSS 13.7%8.8 High
- intel inet wireless daemon, fedoraproject fedora +1 morep2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of...CVE-2024-28084Fix available7.5 High
- qpdf project qpdf, fedoraproject fedora +1 moreHeap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via...CVE-2024-24246Fix available5.5 Medium
- clojure, fedoraproject fedora +1 moreReading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of serviceCVE-2024-22871Fix available7.5 High
- lsegal yard, debian linux, fedoraproject fedora +2 moreYARD's default template vulnerable to Cross-site Scripting in generated frames.htmlCVE-2024-27285Fix available5.4 Medium
- google chrome, v8, fedoraproject fedora +2 moreType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...CVE-2024-1939Public exploitFix available8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...CVE-2024-1938Fix available8.8 High
- liblas, fedoraproject fedora +1 morelibLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.CVE-2024-275077.5 High
- oisf libhtp, fedoraproject fedora +1 moreLibHTP unbounded folded header handling leads to denial serviceCVE-2024-23837Fix available7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata http2: header handling evasionCVE-2024-24568Fix available5.3 Medium
- oisf suricata, fedoraproject fedora +1 moreSuricata http: heap use after free with http.request_header and http.response_header keywordsCVE-2024-23839Fix available7.1 High
- oisf suricata, fedoraproject fedora +1 morecrafted traffic can cause denial of serviceCVE-2024-23836Fix available7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata's pgsql: memory exhaustion use on record parsingCVE-2024-23835Fix available7.5 High
- nlnet labs routinator, fedoraproject fedora +1 moreRoutinator terminates when RTR connection is reset too quickly after openingCVE-2024-16227.5 High
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted archives or...CVE-2024-25082Public exploitFix available6.5 Medium
- fontforge, debian linux, fedoraproject fedora +2 moreSplinefont in FontForge through 20230101 allows command injection via crafted filenames.CVE-2024-25081Public exploitFix available4.2 Medium
- apostrophecms sanitize-html, fedoraproject fedora +1 moresanitize-html Information Exposure vulnerabilityCVE-2024-21501Fix available5.3 Medium
- Show moreLoading…