Skip to contentFedoraproject vulnerabilities
Newest
- x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 moreA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in...CVE-2023-0494Fix available7.8 High
- gnu less, fedoraproject fedora +1 moreIn GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences...CVE-2022-46663Fix available7.5 High
- harfbuzz project harfbuzz, fedoraproject fedora +1 morehb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via...CVE-2023-25193Fix available7.5 High
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...CVE-2023-25136Public exploitFix availableEPSS 89.8%6.5 Medium
- microsoft pesign, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in pesign. The pesign package provides a systemd service used to start the...CVE-2022-3560Fix available5.5 Medium
- gnu tar, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized...CVE-2022-48303Fix available5.5 Medium
- libtiff, fedoraproject fedora +1 moreLibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to...CVE-2022-4645Fix available6.8 Medium
- fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 moresssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersCVE-2022-4254Fix available8.8 High
- gnu binutils, fedoraproject fedora, redhat enterprise linux +2 moreAn illegal memory access flaw was found in the binutils package. Parsing an ELF file containing...CVE-2022-4285Fix available5.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119...CVE-2022-4926Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2023-0433Fix available7.8 High
- xiph opusfile, fedoraproject fedora +1 moreA null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile...CVE-2022-47021Fix available7.8 High
- sudo project sudo, apple macos, debian linux +1 more +3 moreIn Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...CVE-2023-22809Public exploitFix availableEPSS 55.4%7.8 High
- haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAn uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash...CVE-2023-0056Fix available6.5 Medium
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 morepgAdmin 4 Open Redirect vulnerabilityCVE-2023-22298Fix available6.1 Medium
- ruby-git, debian linux, fedoraproject fedora +2 moreCode injection in ruby gitCVE-2022-47318Fix available8.0 High
- samba, fedoraproject fedora +1 moreAn information leak vulnerability was discovered in Samba's LDAP server. Due to missing access...CVE-2018-14628Fix available4.3 Medium
- torproject tor, debian linux, fedoraproject fedora +2 moreThe SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol...CVE-2023-23589Fix available6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vimCVE-2023-0288Fix available7.3 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 moreImportant: kernel security and bug fix updateCVE-2023-0179Public exploitFix available7.8 High
- eternal terminal project terminal, fedoraproject fedora +1 moreIn Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.CVE-2022-482575.3 Medium
- upx, fedoraproject fedora +1 moreUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cppCVE-2023-23457Fix available5.3 Medium
- upx, fedoraproject fedora +1 moreUpx: heap-buffer-overflow in packtmt::pack()CVE-2023-23456Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2022-47927Fix available5.5 Medium
- samba, fedoraproject fedora +1 moreA symlink following vulnerability was found in Samba, where a user can create a symbolic link...CVE-2022-3592Fix available6.5 Medium
- mediawiki, fedoraproject fedora +1 moreIn the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API...CVE-2023-22945Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22911Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22909Fix available5.3 Medium
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +2 more +4 more.NET Denial of Service VulnerabilityCVE-2023-21538Fix available7.5 High
- linux kernel, fedoraproject fedora +1 moreA use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux...CVE-2022-4379Fix available7.5 High
- vim, vim vim/vim, apple macos +3 more +5 moreOut-of-bounds Read in vim/vimCVE-2023-0049Fix available7.3 High
- jnunemaker httparty, debian linux, fedoraproject fedora +2 morehttparty Multipart/Form-Data Request Tampering VulnerabilityCVE-2024-22049Fix available5.3 Medium
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- json5, fedoraproject fedora +1 morePrototype Pollution in JSON5 via Parse MethodCVE-2022-46175Public exploitFix available7.1 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...CVE-2022-43551Fix availableEPSS 16.6%7.5 High
- ffmpeg, debian linux, fedoraproject fedora +2 moreAn issue was discovered in the FFmpeg through 3.0. vp3_decode_frame in libavcodec/vp3.c lacks...CVE-2022-3109Fix available7.5 High
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap...CVE-2022-46393Fix available9.8 Critical
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access...CVE-2022-46392Fix available5.3 Medium
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46344Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46343Fix available8.8 High
- debian linux, fedoraproject fedora, the xorg project xorg-x11-server +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46342Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...CVE-2022-46341Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the...CVE-2022-46340Fix available8.8 High
- x.org x server, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function...CVE-2022-4283Fix available7.8 High
- pgadmin 4, fedoraproject fedora +1 morepgadmin4 vulnerable to Code InjectionCVE-2022-4223Fix availableEPSS 80.1%8.8 High
- fedoraproject fedora, openatom openeuler, openeuler 20.03 lts sp1 +2 more +4 moreAfter tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is...CVE-2021-33640Fix available6.2 Medium
- rxvt-unicode project rxvt-unicode, fedoraproject extra packages for enterprise linux, fedora +2 moreThe rxvt-unicode package is vulnerable to a remote code execution, in the Perl background...CVE-2022-4170Fix available9.8 Critical
- go standard library net/http, golang go, http2 +2 more +4 moreExcessive memory growth in net/http and golang.org/x/net/http2CVE-2022-41717Public exploitFix available5.3 Medium
- containers podman, fedoraproject fedora +1 moreBuildah (as part of Podman) vulnerable to Path TraversalCVE-2022-4123Fix available3.3 Low
- containers podman, fedoraproject fedora +1 moreBuildah (as part of Podman) vulnerable to Link FollowingCVE-2022-4122Fix available5.3 Medium
- Show moreLoading…