Skip to contentFedoraproject vulnerabilities
Newest
- debian linux, fedoraproject fedora, isc bind +2 more +4 moreMemory leak in ECDSA DNSSEC verification codeCVE-2022-38177Fix available7.5 High
- isc bind, fedoraproject fedora, isc bind9 +2 moreBIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedlyCVE-2022-3080Fix available7.5 High
- debian linux, fedoraproject fedora, isc bind +1 more +3 moreProcessing large delegations may severely degrade resolver performanceCVE-2022-2795Fix available5.3 Medium
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte rangeCVE-2022-39958Fix available7.5 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept headerCVE-2022-39957Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding headerCVE-2022-39956Fix available7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type headerCVE-2022-39955Fix available7.3 High
- grafana, fedoraproject fedora +1 moreAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server adminCVE-2022-35957Fix available6.6 Medium
- apple ios, ipados, safari +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in...CVE-2022-32886Fix available8.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap buffer overflow issue was found in ImageMagick. When an application processes a malformed...CVE-2022-3213Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moredrivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive...CVE-2022-40768Fix available5.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3235Fix available7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2022-3234Fix available7.8 High
- adobe indesign, fedoraproject fedora +1 moreAdobe InDesign 2022 Out-of-Bound Read Memory leakCVE-2022-306745.5 Medium
- github cmark-gfm, fedoraproject fedora +1 moreUncontrolled Resource Consumption in cmark-gfmCVE-2022-39209Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105...CVE-2022-3201Fix available5.4 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote...CVE-2022-3200Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3199Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3198Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3197Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...CVE-2022-3196Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker...CVE-2022-3195Fix available8.8 High
- dependencytrack frontend, zabbix, fedoraproject fedora +2 moreReflected XSS in the backurl parameter of Zabbix FrontendCVE-2022-40626Fix available4.8 Medium
- kdiskmark project kdiskmark, fedoraproject fedora +1 moreKDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper:...CVE-2022-406737.8 High
- libexpat project libexpat, debian linux, fedoraproject fedora +3 more +5 morelibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.CVE-2022-40674Fix available8.1 High
- moodle, fedoraproject fedora +1 moreMoodle Cross-site Scripting vulnerabilityCVE-2021-36568Fix available5.4 Medium
- microsoft .net, .net core, fedoraproject fedora +10 more +12 more.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2022-38013Fix available7.5 High
- sharkfest foundation wireshark, fedoraproject fedora +1 moreInfinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0...CVE-2022-3190Fix available6.3 Medium
- libconfuse project libconfuse, fedoraproject fedora +1 morecfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.CVE-2022-40320Fix available8.8 High
- moby, fedoraproject fedora +1 moreMoby vulnerability relating to supplementary group permissionsCVE-2022-36109Fix available5.3 Medium
- pdfkit project pdfkit, fedoraproject fedora +1 moreCommand InjectionCVE-2022-25765Public exploitFix availableEPSS 42.5%7.3 High
- oauthlib, fedoraproject fedora +1 moreOAuthLib vulnerable DoS when attacker provides malicious IPV6 URICVE-2022-36087Fix available5.7 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA flaw was found in the Linux kernel. A denial of service flaw may occur if there is a...CVE-2022-3169Fix available5.5 Medium
- python, fedoraproject fedora, redhat enterprise linux +5 more +7 moreA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...CVE-2020-10735Fix available7.5 High
- golang go, fedoraproject fedora +1 moregolang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664Fix available7.5 High
- port389 389-ds-base, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an...CVE-2022-2850Fix available6.5 Medium
- dokuwiki, splitbrain splitbrain/dokuwiki, fedoraproject fedora +2 moreCross-site Scripting (XSS) - Reflected in splitbrain/dokuwikiCVE-2022-3123Fix available5.4 Medium
- gnu pspp, fedoraproject fedora +1 moreAn issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function...CVE-2022-39831Fix available7.8 High
- gnu pspp, fedoraproject fedora +1 moreAn issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function...CVE-2022-39832Fix available7.8 High
- google chrome, fedoraproject fedora, google chromium mojo +2 moreInsufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote...CVE-2022-3075In KEVFix available9.6 Critical
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vimCVE-2022-3099Fix available7.8 High
- libdwarf project libdwarf, fedoraproject fedora +1 morelibdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.CVE-2022-391708.8 High
- samba, fedoraproject fedora +1 moreSamba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which...CVE-2022-32743Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed...CVE-2022-3071Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker...CVE-2022-3058Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a...CVE-2022-3057Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195...CVE-2022-3056Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who...CVE-2022-3055Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a...CVE-2022-3054Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52...CVE-2022-3053Fix available4.3 Medium
- Show moreLoading…