Skip to contentFedoraproject vulnerabilities
Newest
- element-hq synapse, fedoraproject fedora +1 moreDenial of service attack via incorrect parameters to federation APIsCVE-2020-26257Fix available6.5 Medium
- debian linux, linux kernel, broadcom fabric operating system +8 more +10 moreA locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9...CVE-2020-29660Fix available4.4 Medium
- debian linux, linux kernel, broadcom fabric operating system +9 more +11 moreA locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers...CVE-2020-29661Public exploitFix available7.8 High
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...CVE-2020-8285Fix available7.5 High
- pytest py, fedoraproject fedora, oracle zfs storage appliance kit +2 morepy vulnerable to Regular Expression Denial of ServiceCVE-2020-29651Fix available7.5 High
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...CVE-2020-8286Fix available7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x...CVE-2020-27823Fix available7.8 High
- apple icloud, ipados, itunes +9 more +11 moreA use after free issue was addressed with improved memory management. This issue is fixed in...CVE-2020-27918Fix available7.8 High
- imagemagick, fedoraproject fedora +1 moreIn WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory(...CVE-2020-25664Fix available6.1 Medium
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 moreGNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw...CVE-2020-29385Fix available5.5 Medium
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- awstats, debian linux, fedoraproject fedora +2 moreIn AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it...CVE-2020-29600Fix available9.8 Critical
- libpng pngcheck, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a...CVE-2020-27818Public exploitFix available3.3 Low
- gnu glibc, fedoraproject fedora, netapp e-series santricity os controller +3 more +5 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4...CVE-2020-29562Fix available4.8 Medium
- haxx curl, apple mac os x, macos +22 more +24 moreA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...CVE-2020-8284Fix available3.7 Low
- audacityteam audacity, fedoraproject fedora +1 moreAudacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After...CVE-2020-11867Fix available3.3 Low
- containerd, debian linux, fedoraproject fedora +2 morecontainerd-shim API Exposed to Host Network ContainersCVE-2020-15257Public exploitFix available5.2 Medium
- libslirp project libslirp, debian linux, fedoraproject fedora +2 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2020-29129Fix available4.3 Medium
- libslirp project libslirp, debian linux, fedoraproject fedora +2 moreslirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain...CVE-2020-29130Fix available4.3 Medium
- lxml, debian linux, fedoraproject fedora +5 more +7 morelxml vulnerable to Cross-site ScriptingCVE-2020-27783Fix available6.1 Medium
- x11vnc project x11vnc, debian linux, fedoraproject fedora +2 morescan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other...CVE-2020-29074Fix available8.8 High
- musl-libc musl, debian linux, fedoraproject fedora +1 more +3 moreIn musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...CVE-2020-28928Fix available5.5 Medium
- matrix synapse, fedoraproject fedora +1 moreDenial of service attack due to invalid JSONCVE-2020-26890Fix available7.5 High
- cimg, fedoraproject fedora +1 moreA flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer...CVE-2020-25693Fix available8.1 High
- webkit, webkitgtk, fedoraproject fedora +2 moreAn exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A...CVE-2020-13584Fix available8.8 High
- debian linux, fedoraproject fedora, librdf raptor rdf syntax library +2 moreA malformed input file can lead to a segfault due to an out of bounds array access in...CVE-2020-25713Fix available6.5 Medium
- glyph & cog xpdf, fedoraproject fedora +1 moreIn Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to...CVE-2020-25725Fix available5.0 Medium
- pdfresurrect project pdfresurrect, debian linux, fedoraproject fedora +2 morePDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in...CVE-2020-20740Fix available7.8 High
- libvips, debian linux, fedoraproject fedora +2 moreim_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an...CVE-2020-20739Fix available5.3 Medium
- ceph, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...CVE-2020-25660Fix available8.8 High
- ibm aix, vios, fedoraproject fedora +3 more +5 moreIBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive...CVE-2020-4788Fix available5.1 Medium
- rclone, fedoraproject fedora +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator in RcloneCVE-2020-28924Fix available7.5 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreDeserialization of Untrusted Data in Archive_TarCVE-2020-28948Public exploitFix availableEPSS 47.5%7.8 High
- debian linux, drupal, fedoraproject fedora +1 more +3 moreMultiple vulnerabilities through filename manipulation in Archive_TarCVE-2020-28949In KEVPublic exploitFix availableEPSS 84.6%7.8 High
- moodle, fedoraproject fedora +1 moreSQL Injection in moodleCVE-2020-25700Fix available6.5 Medium
- moodle, fedoraproject fedora +1 moreCross-site Scripting (XSS) in moodleCVE-2020-25702Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in MoodleCVE-2020-25703Fix available5.3 Medium
- moodle, fedoraproject fedora +1 morePrivilage Escalation in moodleCVE-2020-25701Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreImproper Access Control in moodleCVE-2020-25698Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through...CVE-2020-28941Fix available5.5 Medium
- nodejs node, node.js, c-ares project c-ares +6 more +8 moreUncontrolled Resource Consumption in nodeCVE-2020-8277Public exploitFix availableEPSS 54.2%7.5 High
- moodle, fedoraproject fedora +1 morePrivilage Escalation in moodleCVE-2020-25699Fix available7.5 High
- drupal, drupal core, fedoraproject fedora +2 moreDrupal core Unrestricted Upload of File with Dangerous TypeCVE-2020-13671In KEVPublic exploitFix availableEPSS 32.6%8.8 High
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.CVE-2020-28362Fix available7.5 High
- go toolchain cmd/cgo, cmd/go, golang go +3 more +5 moreArbitrary code execution in go command with cgo in cmd/go and cmd/cgoCVE-2020-28366Fix available7.5 High
- fedoraproject fedora, tpm2 software stack project software stack +1 moreMissing initialization of a variable in the TPM2 source may allow a privileged user to...CVE-2020-24455Fix available6.7 Medium
- openldap, debian linux, fedoraproject fedora +7 more +9 moreA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...CVE-2020-25710Fix available7.5 High
- python-rsa project python-rsa, fedoraproject fedora, redhat openstack platform +2 moreTiming attacks in python-rsaCVE-2020-25658Fix available7.5 High
- xen, debian linux, fedoraproject fedora +2 moreXen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES...CVE-2020-28368Fix available4.4 Medium
- debian linux, fedoraproject fedora, intel microcode +14 more +16 moreImproper isolation of shared resources in some Intel(R) Processors may allow an authenticated...CVE-2020-8698Fix available5.5 Medium
- Show moreLoading…