Skip to contentFedoraproject vulnerabilities
Newest
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0714Fix availableEPSS 12.7%8.4 High
- libreoffice, fedoraproject fedora +1 moreIncorrect trust validation of signature with ambiguous KeyInfo childrenCVE-2021-25636Fix available7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreNULL Pointer Dereference in vim/vimCVE-2022-0696Fix available6.2 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0685Fix available8.4 High
- ceph, redhat ceph storage, fedoraproject fedora +5 more +7 moreA key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...CVE-2021-3979Fix available6.5 Medium
- stefanberger swtpm, fedoraproject fedora, redhat enterprise linux +2 moreOut-of-bounds read in swtpmCVE-2022-23645Fix available6.2 Medium
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...CVE-2021-3657Fix available9.8 Critical
- cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 moreCommand Injection in CobblerCVE-2021-45082Fix available7.8 High
- cobbler project cobbler, fedoraproject fedora +1 moreIncorrect Default Permissions in CobblerCVE-2021-45083Fix available7.1 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.CVE-2022-25314Public exploitFix available7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.CVE-2022-25315Public exploitFix available9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...CVE-2022-25313Public exploitFix available6.5 Medium
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24052Fix available7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24051Fix available7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24050Fix available7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...CVE-2022-24048Fix available7.0 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow...CVE-2022-0585Fix available4.3 Medium
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44730Fix available7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout pathsCVE-2021-4120Fix available8.2 High
- vim, vim vim/vim, apple macos +2 more +4 moreStack-based Buffer Overflow in vim/vimCVE-2022-0629Fix available8.4 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administratorCVE-2021-44731Public exploitFix available7.8 High
- fedoraproject fedora, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreA flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint...CVE-2021-3773Public exploitFix available9.8 Critical
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23804Fix available7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...CVE-2022-23803Fix available7.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare2CVE-2022-0559Fix available8.4 High
- medialize medialize/uri.js, uri.js project uri.js, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in medialize/uri.jsCVE-2022-0613Fix available5.3 Medium
- drupal core, drupal, fedoraproject fedora +2 moreDrupal core Denial of Service vulnerabilityCVE-2022-25271Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn issue was discovered in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks...CVE-2022-25258Public exploitFix available4.6 Medium
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 morexmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...CVE-2022-25235Public exploitFix available9.8 Critical
- fedoraproject extra packages for enterprise linux, fedora, prometheus client golang +1 more +3 moreUncontrolled Resource Consumption in promhttpCVE-2022-21698Fix available7.5 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...CVE-2021-4115Fix available5.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreInfinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0586Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...CVE-2022-0583Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreUnaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11...CVE-2022-0582Fix available6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...CVE-2022-0581Fix available6.3 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreCross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suiteCVE-2022-05716.8 Medium
- zsh, apple mac os x, macos +2 more +4 moreIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output...CVE-2021-45444Fix available7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2022-0572Fix availableEPSS 26.5%8.4 High
- puma, rubyonrails rails, debian linux +1 more +3 moreInformation Exposure when using Puma with RailsCVE-2022-23634Fix available8.0 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moredrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.CVE-2022-24958Fix available7.8 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...CVE-2022-0562Fix available5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in...CVE-2022-0561Fix available5.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-0554Fix available8.4 High
- linux kernel, ovirt node, fedoraproject fedora +27 more +29 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0435Public exploitFix availableEPSS 67.8%8.8 High
- info-zip unzip, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to...CVE-2022-0529Public exploitFix available5.5 Medium
- info-zip unzip, apple mac os x, macos +3 more +5 moreA flaw was found in unzip 6.0. The vulnerability occurs during the conversion of an utf-8 string...CVE-2022-0530Fix available5.5 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +7 more +9 more.NET Denial of Service VulnerabilityCVE-2022-21986Fix available7.5 High
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location Before Start of Buffer in radareorg/radare2CVE-2022-0522Fix available6.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreExposure of Sensitive Information in GrafanaCVE-2022-21713Fix available4.3 Medium
- Show moreLoading…