Skip to contentFedoraproject vulnerabilities
Newest
- schedmd slurm, debian linux, fedoraproject fedora +2 moreSchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code...CVE-2021-31215Fix available8.8 High
- exiv2, fedoraproject fedora +1 moreUninitialized variable bug in Exiv2CVE-2021-29623Fix available3.6 Low
- sensiolabs symfony, fedoraproject fedora +1 morePrevent user enumeration using Guard or the new Authenticator-based SecurityCVE-2021-21424Public exploitFix available5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +7 more +9 moreLinux kernel llcp_sock_bind/connect use-after-freeCVE-2021-23134Fix available7.8 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +7 more +9 more.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2021-31204Fix available7.3 High
- element-hq synapse, fedoraproject fedora +1 moreDenial of service in Matrix SynapseCVE-2021-29471Fix available3.7 Low
- linux kernel, fedoraproject fedora +1 moreIn the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege...CVE-2021-326067.8 High
- systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 moreAn exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP...CVE-2020-13529Fix available6.1 Medium
- cyrus imap, fedoraproject fedora +1 moreCyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to...CVE-2021-32056Fix available4.3 Medium
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- microsoft hivex, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of...CVE-2021-3504Fix available5.4 Medium
- python pillow, fedoraproject fedora +1 moreInsufficient Verification of Data Authenticity in PillowCVE-2021-28678Fix available5.5 Medium
- python pillow, fedoraproject fedora +1 moreUncontrolled Resource Consumption in PillowCVE-2021-28677Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePotential infinite loop in PillowCVE-2021-28676Fix available7.5 High
- python pillow, fedoraproject fedora +1 morePillow denial of serviceCVE-2021-28675Fix available5.5 Medium
- python pillow, fedoraproject fedora +1 morePillow Out-of-bounds Read vulnerabilityCVE-2021-25288Fix available9.1 Critical
- python pillow, fedoraproject fedora +1 moreOut-of-bounds Read in PillowCVE-2021-25287Fix available9.1 Critical
- eventlet, fedoraproject fedora +1 moreImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventletCVE-2021-21419Fix available5.3 Medium
- djangoproject django, fedoraproject fedora +1 moreHeader injection possible in DjangoCVE-2021-32052Fix available6.1 Medium
- debian linux, linux kernel, fedoraproject fedora +2 morekernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads,...CVE-2021-31829Fix available5.5 Medium
- getdata project getdata, debian linux, fedoraproject fedora +2 moreA heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when...CVE-2021-20204Fix available9.8 Critical
- aomedia, fedoraproject fedora +1 moreaom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.CVE-2021-30473Fix available9.8 Critical
- linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 moreA flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...CVE-2021-3501Fix available7.1 High
- osgeo mapserver, fedoraproject fedora +1 moreMapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and...CVE-2021-32062Fix available5.3 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 moreThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...CVE-2021-3516Fix available7.8 High
- secureauth impacket, fedoraproject fedora +1 morePath traversal in impacketCVE-2021-31800Public exploitFix availableEPSS 19.4%9.8 Critical
- redis, fedoraproject fedora +1 moreVulnerability in the COPY command for large intsetsCVE-2021-29478Fix available7.5 High
- redis, fedoraproject fedora +1 moreVulnerability in the STRALGO LCS commandCVE-2021-29477Fix available7.5 High
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...CVE-2021-26260Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...CVE-2021-23215Fix available5.5 Medium
- djangoproject django, debian linux, fedoraproject fedora +2 morePath Traversal in DjangoCVE-2021-31542Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote...CVE-2021-21233Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to...CVE-2021-21232Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote...CVE-2021-21231Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to...CVE-2021-21230Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a...CVE-2021-21229Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an...CVE-2021-21228Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote...CVE-2021-21227Fix available8.8 High
- opensuse factory, leap 15.2, suse cups +4 more +6 morecups: ownership of /var/log/cups allows the lp user to create files as rootCVE-2021-25317Fix available3.3 Low
- exiv2, fedoraproject fedora +1 moreHeap buffer overflow in Exiv2::Jp2Image::encodeJp2HeaderCVE-2021-29464Fix available3.3 Low
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::WebPImage::doWriteMetadataCVE-2021-29463Fix available3.3 Low
- graphviz, debian linux, fedoraproject fedora +2 moreBuffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows...CVE-2020-18032Fix available7.8 High
- bundler, fedoraproject fedora, microsoft package manager configurations +2 moreDependency Confusion in BundlerCVE-2020-36327Fix available8.8 High
- samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs)...CVE-2021-20254Fix available6.8 Medium
- isc bind, debian linux, fedoraproject fedora +14 more +16 moreAn assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfCVE-2021-25215Fix availableEPSS 11.7%7.5 High
- isc bind, debian linux, fedoraproject fedora +13 more +15 moreA broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyCVE-2021-25214Fix available6.5 Medium
- composer, debian linux, fedoraproject fedora +2 moreMissing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial in composerCVE-2021-29472Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who...CVE-2021-21226Fix available9.6 Critical
- Show moreLoading…