Skip to contentFedoraproject vulnerabilities
Newest
- fig2dev project fig2dev, debian linux, fedoraproject fedora +2 moreAn Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects()...CVE-2021-3561Fix available7.1 High
- ckeditor, debian linux, drupal +1 more +3 moreckeditor4 vulnerable to cross-site scriptingCVE-2021-33829Fix available6.1 Medium
- golang go, fedoraproject fedora +1 moregolang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194Fix available7.5 High
- debian linux, fedoraproject fedora, linux kernel +10 more +12 moreImproper memory handling in Linux KVMCVE-2021-22543Fix available8.7 High
- haxx curl, debian linux, fedoraproject fedora +12 more +14 morecurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option,...CVE-2021-22898Fix available3.1 Low
- cacalabs libcaca, fedoraproject fedora +1 moreA flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead...CVE-2021-30498Fix available7.8 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclientCVE-2021-25217Fix available7.4 High
- yubico pam-u2f, fedoraproject fedora +1 moreYubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and...CVE-2021-31924Fix available6.8 Medium
- gnu glibc, debian linux, fedoraproject fedora +13 more +15 moreThe mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may...CVE-2021-33574Fix available9.8 Critical
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...CVE-2021-23017Public exploitFix availableEPSS 53.5%7.7 High
- bluetooth core specification, fedoraproject fedora, intel ac 3165 firmware +14 more +16 moreBluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may...CVE-2020-26555Fix available5.4 Medium
- bluetooth core specification, debian linux, fedoraproject fedora +16 more +18 moreBluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit...CVE-2020-26558Fix available4.2 Medium
- eterm project eterm, mrxvt project mrxvt, rxvt-unicode project rxvt-unicode +3 more +5 morerxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code...CVE-2021-33477Fix available8.8 High
- fedoraproject fedora, openidc mod auth openidc, oracle essbase +2 moreCVE-2021-20718 affecting package mod_auth_openidc for versions less than 2.4.14.2-1CVE-2021-20718Fix available7.5 High
- microsoft libdnf, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This...CVE-2021-3445Fix available7.5 High
- linuxfoundation runc, fedoraproject fedora +1 moremount destinations can be swapped via symlink-exchange to cause mounts outside the rootfsCVE-2021-30465Fix availableEPSS 10.2%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-29505Public exploitFix availableEPSS 77.2%7.5 High
- slapi-nis project slapi-nis, fedoraproject fedora +1 moreA flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the...CVE-2021-3480Fix available7.5 High
- gnu cflow, fedoraproject fedora +1 moreUse-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src...CVE-2020-23856Fix available5.5 Medium
- [red hat] networkmanager, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a...CVE-2021-20297Fix available5.5 Medium
- ceph, redhat ceph storage, fedoraproject fedora +2 moreA flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a...CVE-2021-3531Fix available5.3 Medium
- x.org libx11, fedoraproject fedora, x.org x window system +2 moreLookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to...CVE-2021-31535Fix availableEPSS 10.4%9.8 Critical
- ceph, redhat ceph storage, debian linux +1 more +3 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14...CVE-2021-3524Fix available6.5 Medium
- exiv2, fedoraproject fedora +1 moreDenial of service in Exiv2CVE-2021-32617Fix available4.7 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30520Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30519Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote...CVE-2021-30518Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30517Public exploitFix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker...CVE-2021-30516Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30515Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who...CVE-2021-30514Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30513Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker...CVE-2021-30512Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30511Fix available8.1 High
- google chrome, fedoraproject fedora +1 moreUse after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...CVE-2021-30510Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who...CVE-2021-30509Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker...CVE-2021-30508Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212...CVE-2021-30507Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212...CVE-2021-30506Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreIn the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying...CVE-2021-33034Public exploitFix available7.8 High
- upx, fedoraproject fedora +1 moreA heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not...CVE-2020-24119Fix available7.1 High
- virustotal yara, fedoraproject fedora +1 moreAn integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4...CVE-2021-3402Fix available9.1 Critical
- radare radare2, fedoraproject fedora +1 moreIn radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file...CVE-2021-32613Fix available5.5 Medium
- pydantic, fedoraproject fedora +1 moreUse of "infinity" as an input to datetime and date fields causes infinite loop in pydanticCVE-2021-29510Fix available3.3 Low
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for...CVE-2021-32921Fix available5.9 Medium
- prosody, debian linux, fedoraproject fedora +2 moreProsody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation...CVE-2021-32920Fix available7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback...CVE-2021-32919Fix available7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote...CVE-2021-32918Fix available7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by...CVE-2021-32917Fix available5.3 Medium
- c-ares, fedoraproject fedora +1 moreA possible use-after-free and double-free in c-ares lib version 1.16.0 if ares_destroy() is...CVE-2020-14354Fix available3.3 Low
- Show moreLoading…