Skip to contentFedoraproject vulnerabilities
Newest
- tcpdump, apple mac os x, debian linux +3 more +5 moreThe LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().CVE-2018-14461Fix available7.5 High
- exim, canonical ubuntu linux, debian linux +2 more +4 moreExim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019...CVE-2019-16928In KEVFix availableEPSS 41.6%9.8 Critical
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible information disclosure due to improper input validation. This...CVE-2019-9433Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible resource exhaustion due to improper input validation. This could...CVE-2019-9371Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9325Fix available6.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libexif, there is a possible out of bounds write due to an integer overflow. This could lead...CVE-2019-9278Fix available8.8 High
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2019-9232Fix available7.5 High
- adobe flash player, flash player desktop runtime, debian linux +2 more +4 moreAdobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass...CVE-2019-80757.5 High
- golang go, debian linux, fedoraproject fedora +6 more +8 moreGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.CVE-2019-16276Fix available7.5 High
- fedoraproject fedora, mit krb5, kerberos 5 +2 moreA flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a...CVE-2019-148447.5 High
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki information disclosureCVE-2019-16738Fix available5.3 Medium
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...CVE-2019-16910Fix available5.3 Medium
- rubyzip project rubyzip, fedoraproject fedora, redhat cloudforms +2 moreRubyzip denial of serviceCVE-2019-16892Fix available5.5 Medium
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreAn issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not...CVE-2019-16746Public exploitFix availableEPSS 12.7%9.8 Critical
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +6 more +8 moreAn exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1...CVE-2019-5094Fix available7.5 High
- hunspell project hunspell, fedoraproject fedora +1 moreHunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.CVE-2019-16707Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +25 more +27 moreAn out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way...CVE-2019-14821Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- infradead openconnect, canonical ubuntu linux, debian linux +2 more +4 moreprocess_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server...CVE-2019-16239Fix available9.8 Critical
- trusteddomain opendmarc, canonical ubuntu linux, debian linux +1 more +3 moreOpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass...CVE-2019-16378Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...CVE-2019-14835Fix available7.2 High
- fasterxml jackson-databind, debian linux, fedoraproject fedora +14 more +16 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-16335Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +16 more +18 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540Public exploitFix availableEPSS 10.8%9.8 Critical
- phpmyadmin, fedoraproject fedora +1 morephpMyAdmin Cross-Site Request Forgery (CSRF)CVE-2019-12922Public exploitFix availableEPSS 10.7%6.5 Medium
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of a carbons message in module/xep...CVE-2019-16235Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.CVE-2019-16236Fix available7.5 High
- dino, canonical ubuntu linux, debian linux +1 more +3 moreDino before 2019-09-10 does not properly check the source of an MAM message in module/xep...CVE-2019-16237Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moredrivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the...CVE-2019-16232Fix available4.1 Medium
- curl, debian linux, fedoraproject fedora +17 more +19 moreHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-5482Fix availableEPSS 17.9%9.8 Critical
- curl, debian linux, fedoraproject fedora +12 more +14 moreDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-5481Fix available9.8 Critical
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- oniguruma project oniguruma, canonical ubuntu linux, debian linux +1 more +3 moreOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.CVE-2019-16163Fix available7.5 High
- nic bird, debian linux, fedoraproject fedora +1 more +3 moreBIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer...CVE-2019-16159Fix available7.5 High
- sysstat project sysstat, canonical ubuntu linux, debian linux +2 more +4 moresysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in...CVE-2019-16167Fix available5.5 Medium
- imapfilter project imapfilter, debian linux, fedoraproject fedora +2 more +4 moreIMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.CVE-2016-10937Fix available7.5 High
- python, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...CVE-2019-16056Fix available7.5 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +3 more +5 moreUnsafe URL assembly flaw in allowed script location checkCVE-2019-9854Fix available7.8 High
- opensc project opensc, debian linux, fedoraproject fedora +2 moreOpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in...CVE-2019-15946Fix available6.4 Medium
- opensc project opensc, debian linux, fedoraproject fedora +2 moreOpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string...CVE-2019-15945Fix available6.4 Medium
- systemd project systemd, fedoraproject fedora, redhat enterprise linux +11 more +13 moreIn systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by...CVE-2019-15718Fix available4.4 Medium
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons CompressCVE-2019-12402Fix availableEPSS 16.2%7.5 High
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in the Ceph RGW configuration with Beast as the front end handling client...CVE-2019-10222Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +36 more +38 moreThere is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell...CVE-2019-14816Fix available5.5 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in, ghostscript versions prior to 9.28, in the .pdfexectoken and other...CVE-2019-14817Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreA flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where...CVE-2019-14813Fix available7.3 High
- artifex ghostscript, fedoraproject fedora +1 moreA flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure...CVE-2019-14812Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure...CVE-2019-14811Public exploitFix available7.3 High
- dovecot, dovecot pigeonhole, debian linux +1 more +3 moreIn Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol...CVE-2019-11500Fix availableEPSS 62.3%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreAn issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5...CVE-2019-15538Fix available7.5 High
- Show moreLoading…