Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, fedoraproject fedora +1 moreUse after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who...CVE-2021-30600Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute...CVE-2021-30599Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute...CVE-2021-30598Fix available8.8 High
- isc bind, fedoraproject fedora, isc bind9 +2 moreA too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in useCVE-2021-25218Fix available7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...CVE-2021-39242Fix available7.5 High
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2...CVE-2021-39241Fix available5.3 Medium
- haproxy, debian linux, fedoraproject fedora +2 moreAn issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It...CVE-2021-39240Fix available7.5 High
- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3656Public exploitFix available8.8 High
- fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 moreA flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via...CVE-2021-3621Fix available8.8 High
- apache http server, debian linux, fedoraproject fedora +3 more +5 moreRequest splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Fix availableEPSS 46.2%7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A...CVE-2021-3635Fix available4.4 Medium
- ckeditor, ckeditor ckeditor4, debian linux +10 more +12 moreExecution of JavaScript code using malformed HTML in ckeditorCVE-2021-37695Fix available7.3 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....CVE-2021-31556Fix available9.8 Critical
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 moreArbitrary HTML injection vulnerability in ckeditorCVE-2021-32809Fix available4.6 Medium
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 moreCross-site scripting in ckeditor via abuse of undo functionalityCVE-2021-32808Fix available7.6 High
- gnu glibc, fedoraproject fedora, oracle communications cloud native core binding support function +8 more +10 moreIn librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c...CVE-2021-38604Fix available7.5 High
- qt, fedoraproject fedora +1 moreQt 5.0.0 through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from...CVE-2021-38593Fix available7.5 High
- postgresql, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory...CVE-2021-3677Fix available6.5 Medium
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before...CVE-2021-00027.1 High
- fedoraproject fedora, intel ethernet controller e810 firmware +1 moreImproper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers...CVE-2021-00044.4 Medium
- exim libspf2, fedoraproject fedora, redhat enterprise linux +2 moreStack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can...CVE-2021-20314Fix available9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote...CVE-2021-30597Fix available6.8 Medium
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a...CVE-2021-30596Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker...CVE-2021-30594Fix available6.8 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who...CVE-2021-30593Fix available8.1 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who...CVE-2021-30592Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote...CVE-2021-30591Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote...CVE-2021-30590Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 moreA NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking...CVE-2021-3659Fix available5.5 Medium
- c-ares, fedoraproject fedora, nodejs node.js +14 more +16 moreA flaw was found in c-ares library, where a missing input validation check of host names returned...CVE-2021-3672Fix available5.6 Medium
- exiv2, fedoraproject fedora +1 moreDenial of service due to infinite loop in JpegBase::printStructure (#2)CVE-2021-37623Fix available5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to infinite loop in JpegBase::printStructure (#1)CVE-2021-37622Fix available5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to infinite loop in Image::printIFDStructureCVE-2021-37621Fix available5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreOut-of-bounds read in XmpTextValue::read()CVE-2021-37620Fix available4.7 Medium
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::Jp2Image::encodeJp2HeaderCVE-2021-37619Fix available4.7 Medium
- exiv2, fedoraproject fedora +1 moreOut-of-bounds read in Exiv2::Jp2Image::printStructureCVE-2021-37618Fix available4.7 Medium
- exiv2, fedoraproject fedora +1 moreNull pointer dereference in Exiv2::Internal::resolveLens0x8ffCVE-2021-37616Fix available5.5 Medium
- exiv2, fedoraproject fedora +1 moreNull pointer dereference in Exiv2::Internal::resolveLens0x319CVE-2021-37615Fix available4.7 Medium
- fedoraproject fedora, p5-encode project p5-encode +1 moreEncode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a...CVE-2021-36770Fix available7.8 High
- exiv2, fedoraproject fedora +1 moreDenial of service due to FPE in Exiv2::Internal::resolveLens0xffffCVE-2021-34335Fix available4.7 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to integer overflow in loop counterCVE-2021-34334Fix available5.5 Medium
- exiv2, debian linux, fedoraproject fedora +2 moreDenial of service due to assertion failure in crwimage_int.cppCVE-2021-32815Fix available5.5 Medium
- golang go, debian linux, fedoraproject fedora +2 more +4 moreGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...CVE-2021-36221Fix available5.9 Medium
- digint btrbk, debian linux, fedoraproject fedora +2 moreBtrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering...CVE-2021-38173Fix available9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +2 moreIn kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out...CVE-2021-38166Fix available7.8 High
- golang go, fedoraproject fedora, oracle timesten in-memory database +2 moreGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...CVE-2021-29923Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreInsufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107...CVE-2021-30589Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...CVE-2021-30588Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a...CVE-2021-30587Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in dialog box handling in Windows in Google Chrome prior to 92.0.4515.107 allowed...CVE-2021-30586Fix available8.8 High
- Show moreLoading…