Skip to contentFedoraproject vulnerabilities
Newest
- chafa project chafa, hpjansson hpjansson/chafa, fedoraproject fedora +2 morechafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafaCVE-2022-1507Fix available5.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...CVE-2022-27776Fix available6.5 Medium
- samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...CVE-2022-27239Fix available7.8 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Server authentication might allow invalid credentials to passCVE-2022-24883Fix available7.4 High
- freerdp, fedoraproject extra packages for enterprise linux, fedora +2 moreServer side NTLM does not properly check parameters in FreeRDPCVE-2022-24882Fix available9.1 Critical
- giflib project giflib, fedoraproject fedora +1 moreThere is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.CVE-2022-28506Fix available5.5 Medium
- freetype, fedoraproject fedora +1 moreFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation...CVE-2022-27406Fix available7.5 High
- freetype, fedoraproject fedora +1 moreFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation...CVE-2022-27405Fix available7.5 High
- freetype, fedoraproject fedora +1 moreFreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer...CVE-2022-27404Fix available9.8 Critical
- vim, vim vim/vim, apple macos +1 more +3 moreUse of Out-of-range Pointer Offset in vim/vimCVE-2022-1420Fix available6.8 Medium
- gnome epiphany, debian linux, fedoraproject fedora +2 moreIn GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer...CVE-2022-29536Fix available7.5 High
- golang go, fedoraproject extra packages for enterprise linux, fedora +2 moreThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...CVE-2022-28327Fix available7.5 High
- golang go, fedoraproject fedora, netapp kubernetes monitoring operator +2 moreencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...CVE-2022-24675Public exploitFix available7.5 High
- git, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreCommand InjectionCVE-2022-25648Fix available8.1 High
- hashicorp consul, fedoraproject fedora +1 moreHashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vectorCVE-2022-29153Fix available7.5 High
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.CVE-2021-42778Fix available5.3 Medium
- kubernetes cri-o, mobyproject moby, fedoraproject fedora +1 more +3 moreIncorrect Default Permissions in CRI-OCVE-2022-27652Fix available5.3 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreglobal heap buffer overflow in skip_range in vim/vimCVE-2022-1381Fix available7.8 High
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreXSS via Embedded SVG in SVG Diagram Format in plantuml/plantumlCVE-2022-1231Fix available9.3 Critical
- stb project stb, fedoraproject fedora +1 moreSTB v2.27 was discovered to contain an integer shift of invalid size in the component...CVE-2022-28048Fix available8.8 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function...CVE-2022-28042Fix available8.8 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an integer overflow via the function...CVE-2022-28041Fix available6.5 Medium
- e2fsprogs project e2fsprogs, fedoraproject fedora, redhat enterprise linux +3 more +5 moreAn out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a...CVE-2022-1304Fix available7.8 High
- mutt, debian linux, fedoraproject fedora +2 moreBuffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3...CVE-2022-1328Fix available4.3 Medium
- composer, fedoraproject fedora, tenable tenable.sc +2 moreMissing input validation can lead to command execution in composerCVE-2022-24828Fix available8.3 High
- python, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...CVE-2015-20107Public exploitFix available7.6 High
- git-for-windows git, apple xcode, debian linux +1 more +3 moreUncontrolled search for the Git directory in Git for WindowsCVE-2022-24765Public exploitFix available6.0 Medium
- nokogiri, apple macos, debian linux +1 more +3 moreInefficient Regular Expression Complexity in NokogiriCVE-2022-24836Fix available7.5 High
- linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 morejbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use...CVE-2022-28796Fix available7.0 High
- lua, fedoraproject fedora +1 moresinglevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a...CVE-2022-28805Fix available9.1 Critical
- apple macos, mac os x, fedoraproject fedora +2 moreA cookie management issue was addressed with improved state management. This issue is fixed in...CVE-2022-22662Fix available6.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreCVE-2022-1158 affecting package kernel for versions less than 5.15.67.1-4CVE-2022-1158Fix available7.8 High
- async project async, fedoraproject fedora +1 morePrototype Pollution in asyncCVE-2021-43138Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26361Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26360Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26359Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26358Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morerace in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for...CVE-2022-26357Fix available7.0 High
- xen, debian linux, fedoraproject fedora +2 moreRacy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log...CVE-2022-26356Fix available5.6 Medium
- containers crun, fedoraproject fedora, redhat enterprise linux +1 more +3 moreImportant: container-tools:rhel8 security, bug fix, and enhancement updateCVE-2022-27650Fix available7.5 High
- twisted, debian linux, fedoraproject fedora +1 more +3 moreHTTP Request Smuggling in twisted.webCVE-2022-24801Fix available8.1 High
- htmldoc project htmldoc, fedoraproject fedora +1 moreIn HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer...CVE-2022-24191Fix available5.5 Medium
- moment, debian linux, fedoraproject fedora +2 more +4 morePath Traversal in Moment.jsCVE-2022-24785Public exploitFix availableEPSS 13.8%7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a...CVE-2022-28388Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moremcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a...CVE-2022-28389Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a...CVE-2022-28390Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreCVE-2022-1204 affecting package kernel for versions less than 5.15.82.1-1CVE-2022-1204Fix available5.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn unauthorized access to the execution of the setuid file with capabilities flaw in the Linux...CVE-2021-3847Fix available7.8 High
- containers podman, fedoraproject fedora, redhat developer tools +11 more +13 morePodman's default inheritable capabilities for linux container not emptyCVE-2022-27649Fix available7.5 High
- buildah project buildah, fedoraproject fedora, redhat enterprise linux +2 moreNon-empty default inheritable capabilities for linux container in BuildahCVE-2022-27651Fix available6.8 Medium
- Show moreLoading…