Skip to contentFedoraproject vulnerabilities
Newest
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)....CVE-2021-2356Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated)....CVE-2021-2354Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2021-2352Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2021-2342Fix available4.9 Medium
- oracle graalvm, debian linux, fedoraproject fedora +4 more +6 moreVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2021-2341Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached)....CVE-2021-2340Fix available2.7 Low
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2021-2339Fix available4.9 Medium
- libarchive, apple ipados, iphone os +4 more +6 morelibarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from...CVE-2021-36976Fix available6.5 Medium
- unicorn-engine unicorn engine, fedoraproject fedora +1 moreUnicorn Engine 1.0.2 has an out-of-bounds write in tb_flush_armeb (called from cpu_arm_exec_armeb...CVE-2021-369795.5 Medium
- libass project libass, fedoraproject fedora +1 morelibass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from...CVE-2020-36430Fix available7.8 High
- gnu aspell, debian linux, fedoraproject fedora +2 moreobjstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top ...CVE-2019-25051Fix available7.8 High
- systemd project systemd, debian linux, fedoraproject fedora +5 more +7 morebasic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...CVE-2021-33910Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +4 more +6 morefs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict...CVE-2021-33909Public exploitFix available7.8 High
- libsndfile project libsndfile, debian linux, fedoraproject fedora +2 moreA heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows...CVE-2021-3246Fix available8.8 High
- containerd, fedoraproject fedora +1 moreArchive package allows chmod of file outside of unpack target directoryCVE-2021-32760Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreA flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found...CVE-2021-3640Fix available7.0 High
- fail2ban, fedoraproject fedora +1 morePossible RCE vulnerability in mailing action using mailutils (mail-whois)CVE-2021-32749Fix available6.1 Medium
- golang go, fedoraproject fedora, netapp cloud insights telegraf +3 more +5 moreThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...CVE-2021-34558Public exploitFix available6.5 Medium
- varnish-cache varnish cache, varnish cache project cache, debian linux +1 more +3 moreVarnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a...CVE-2021-36740Fix available6.5 Medium
- arm mbed tls, debian linux, fedoraproject fedora +2 moreIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...CVE-2021-24119Fix available4.9 Medium
- python pillow, debian linux, fedoraproject fedora +2 moreBuffer Overflow in PillowCVE-2021-34552Fix available9.8 Critical
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on public DAV endpointCVE-2021-327055.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreLack of ratelimit on shareinfo endpointCVE-2021-327035.3 Medium
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreApplication specific tokens can change their own scopeCVE-2021-326888.8 High
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreAudit log is not properly logging unsetting of share expiration dateCVE-2021-326803.3 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreFilenames not escaped by default in controllers using DownloadResponseCVE-2021-326793.5 Low
- nextcloud server, fedoraproject fedora, kiteworks security-advisories +2 moreRatelimit not applied on OCS API responsesCVE-2021-326783.7 Low
- fossil-scm fossil, fedoraproject fedora +1 moreFossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS...CVE-2021-36377Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreAn out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in...CVE-2021-3612Fix available7.8 High
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events...CVE-2021-21779Fix available6.8 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the way certain events are processed for ImageLoader...CVE-2021-21775Fix available6.8 Medium
- addressable project addressable, fedoraproject fedora +1 moreRegular Expression Denial of Service in Addressable templatesCVE-2021-32740Fix available7.5 High
- linuxptp project linuxptp, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a...CVE-2021-3571Fix available7.1 High
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...CVE-2021-3570Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...CVE-2021-35197Fix available7.5 High
- djangoproject django, fedoraproject fedora +1 moreSQL Injection in DjangoCVE-2021-35042Public exploitFix availableEPSS 44.4%9.8 Critical
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...CVE-2021-36087Fix available3.3 Low
- debian linux, selinux project selinux, fedoraproject fedora +19 more +21 moreThe CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...CVE-2021-36086Fix available3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...CVE-2021-36085Fix available3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...CVE-2021-36084Fix available3.3 Low
- djvulibre project djvulibre, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in...CVE-2021-3630Fix available5.5 Medium
- uclouvain openjpeg, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when...CVE-2021-3575Fix available7.8 High
- thephpleague flysystem, fedoraproject fedora +1 moreTime-of-check Time-of-use (TOCTOU) Race Condition in league/flysystemCVE-2021-32708Public exploitFix available9.8 Critical
- dovecot, fedoraproject fedora +1 moreDovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem...CVE-2021-29157Fix available7.5 High
- linux, linux kernel, canonical ubuntu linux +2 more +4 moreIt was discovered that the eBPF implementation in the Linux kernel did not properly track bounds...CVE-2021-3600Fix available7.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who...CVE-2021-30557Fix availableEPSS 11.7%8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to...CVE-2021-30556Fix available8.8 High
- google chrome, fedoraproject fedora, google chromium webgl +2 moreUse after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to...CVE-2021-30554In KEVFix available8.8 High
- dovecot, debian linux, fedoraproject fedora +2 moreThe submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp....CVE-2021-33515Fix available4.8 Medium
- dovecot, fedoraproject fedora +1 moreThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as...CVE-2020-28200Fix available4.3 Medium
- Show moreLoading…