Skip to contentFedoraproject vulnerabilities
Newest
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...CVE-2021-3935Fix available8.1 High
- xen, fedoraproject fedora +1 morecertain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address...CVE-2021-28710Fix available8.8 High
- gerbv, debian linux, fedoraproject fedora +2 moreAn out-of-bounds write vulnerability exists in the drill format T-code tool number functionality...CVE-2021-40391Fix available10.0 Critical
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3968Fix available8.0 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3973Fix available7.3 High
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's...CVE-2021-44025Fix available6.1 Medium
- debian linux, fedoraproject fedora, roundcube webmail +2 moreRoundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search...CVE-2021-44026In KEVPublic exploitFix availableEPSS 69.9%9.8 Critical
- wireshark, debian linux, fedoraproject fedora +2 moreUncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...CVE-2021-39929Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39926Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39925Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39924Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreBuffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...CVE-2021-39922Fix available7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17...CVE-2021-39921Fix available7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2021-3974Fix available7.3 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad...CVE-2021-21900Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of...CVE-2021-21899Fix available8.8 High
- librecad libdxfrw, debian linux, fedoraproject fedora +2 moreA code execution vulnerability exists in the dwgCompressor::decompress18() functionality of...CVE-2021-21898Fix available8.8 High
- puppet agent, server, fedoraproject fedora +1 more +3 moreUnsafe HTTP Redirect in Puppet Agent and Puppet ServerCVE-2021-27023Fix available9.8 Critical
- puppet, puppet agent, fedoraproject fedora +1 more +3 moreSilent Configuration Failure in Puppet AgentCVE-2021-27025Fix available6.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreNULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2...CVE-2021-39928Fix available7.5 High
- wireshark, fedoraproject fedora +1 moreNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...CVE-2021-39920Fix available7.5 High
- fedoraproject fedora, linuxfoundation open container initiative distribution specification, open container initiative image format specification +1 more +3 moreClarify Content-Type handling in OCI specCVE-2021-41190Fix available3.0 Low
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia...CVE-2021-43975Fix available6.7 Medium
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new...CVE-2021-433376.5 Medium
- debian linux, linux kernel, fedoraproject fedora +12 more +14 moreIn the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb...CVE-2021-43976Fix available4.6 Medium
- ckeditor, ckeditor ckeditor4, drupal +8 more +10 moreAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTMLCVE-2021-41164Fix available8.2 High
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42386Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42385Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42384Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42383Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42382Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42381Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42380Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42379Fix available7.2 High
- busybox, fedoraproject fedora +1 moreA use-after-free in Busybox's awk applet leads to denial of service and possibly code execution...CVE-2021-42378Fix available7.2 High
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn attacker-controlled pointer free in Busybox's hush applet leads to denial of service and...CVE-2021-42377Fix available9.8 Critical
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreA NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a...CVE-2021-42376Fix available5.5 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn incorrect handling of a special element in Busybox's ash applet leads to denial of service...CVE-2021-42375Fix available5.5 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreAn out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of...CVE-2021-42374Fix available5.3 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 moreA NULL pointer dereference in Busybox's man applet leads to denial of service when a section name...CVE-2021-42373Fix available5.5 Medium
- npmjs npm, fedoraproject fedora, netapp next generation application programming interface +2 moreThe npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if...CVE-2021-43616Public exploitFix availableDisputed9.0 Critical
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux...CVE-2021-20320Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...CVE-2021-3941Fix available6.5 Medium
- fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 moreWhen the server is configured to use trust authentication with a clientcert requirement or to use...CVE-2021-23214Fix available8.1 High
- xiph speex, fedoraproject fedora +1 moreA Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows...CVE-2020-23903Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 moreAn integer overflow could occur when OpenEXR processes a crafted file on systems where size_t <...CVE-2021-3933Fix available5.5 Medium
- lua, fedoraproject fedora +1 moreStack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform...CVE-2021-43519Fix available5.5 Medium
- samba, canonical ubuntu linux, debian linux +1 more +3 moreMultiple flaws were found in the way samba AD DC implemented access and conformance checking of...CVE-2020-25722Fix available8.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- Show moreLoading…