Skip to contentFedoraproject vulnerabilities
Newest
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who...CVE-2023-1811Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker...CVE-2023-1810Fix available8.8 High
- cesnet libyang, fedoraproject fedora +1 morelibyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the...CVE-2023-26916Fix available5.3 Medium
- linux kernel, fedoraproject fedora +1 moreA use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux...CVE-2023-1611Fix available6.3 Medium
- frrouting, debian linux, fedoraproject fedora +2 moreA reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability...CVE-2022-36440Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreX-Forwarded-For header allows brute-forcing autoblocked IP addressesCVE-2023-29141Fix available9.8 Critical
- ruby-lang ruby, time, debian linux +1 more +3 moreRuby Time component ReDoS issueCVE-2023-28756Fix available5.3 Medium
- ruby-lang uri, debian linux, fedoraproject fedora +2 moreRuby URI component ReDoS issueCVE-2023-28755Fix available5.3 Medium
- fedoraproject fedora, x.org x server +1 moreA flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege...CVE-2023-1393Fix available7.8 High
- qemu, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be...CVE-2023-0664Fix available7.8 High
- smarty, fedoraproject fedora +1 moreCross site scripting vulnerability in Javascript escaping in smarty/smartyCVE-2023-28447Public exploitFix available7.1 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a...CVE-2021-3923Fix available2.3 Low
- dino, debian linux, fedoraproject fedora +2 moreDino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the...CVE-2023-28686Fix available7.1 High
- moodle, fedoraproject fedora +1 moreMoodle: teacher can access names of users they do not have permission to accessCVE-2023-28336Fix available4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle: pix helper potential mustache code injection riskCVE-2023-28333Fix available9.8 Critical
- qemu, qemu rdma, fedoraproject fedora +2 moreQemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read()CVE-2023-1544Fix available6.0 Medium
- fedoraproject fedora, linux kernel, redhat enterprise linux +2 moreA flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might...CVE-2023-1513Fix available3.3 Low
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreDuplicate Advisory: ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoSCVE-2023-1289Fix available5.5 Medium
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +2 moreckeditor4 plugins vulnerable to cross-site scripting caused by the editor instance destroying processCVE-2023-284394.7 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...CVE-2023-1534Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...CVE-2023-1533Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote...CVE-2023-1532Fix available8.8 High
- chromium, google chrome, fedoraproject fedora +2 moreUse after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to...CVE-2023-1531Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to...CVE-2023-1530Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote...CVE-2023-1529Fix available9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker...CVE-2023-1528Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42334Fix available6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...CVE-2022-42333Fix available8.6 High
- xen, debian linux, fedoraproject fedora +2 morex86 shadow plus log-dirty mode use-after-free In environments where host assisted address...CVE-2022-42332Fix available7.8 High
- fedoraproject fedora, xen +1 morex86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original...CVE-2022-42331Fix available5.5 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- haxx curl, broadcom brocade fabric operating system firmware, fedoraproject fedora +9 more +11 moreA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...CVE-2023-27534Fix available8.8 High
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...CVE-2023-27533Fix available8.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vimCVE-2023-1264Fix available6.6 Medium
- vim, vim vim/vim, debian linux +2 more +4 moreIncorrect Calculation of Buffer Size in vim/vimCVE-2023-1175Fix available7.3 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2023-1170Fix available7.3 High
- vim, vim vim/vim, fedoraproject fedora +2 moreDivide By Zero in vim/vimCVE-2023-1127Fix available7.3 High
- sudo project sudo, fedoraproject fedora +1 moreSudo before 1.9.13p2 has a double free in the per-command chroot feature.CVE-2023-27320Fix available7.2 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem...CVE-2023-1073Fix available6.6 Medium
- fedoraproject fedora, red hat directory server +1 moreA flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the...CVE-2023-1055Fix available5.5 Medium
- gnome epiphany, fedoraproject fedora +1 moreIn Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating...CVE-2023-26081Fix available7.5 High
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- golang image, tiff, golang.org/x/image golang.org/x/image/tiff +1 more +3 moreDenial of service via crafted TIFF image in golang.org/x/image/tiffCVE-2022-41727Fix available5.5 Medium
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- c-ares, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the...CVE-2022-4904Fix available8.6 High
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- postgresql, fedoraproject fedora, redhat enterprise linux +3 more +5 moreIn PostgreSQL, a modified, unauthenticated server can send an unterminated string during the...CVE-2022-41862Fix available3.7 Low
- palo alto networks cortex xsoar, fedoraproject fedora +1 moreCortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR ServerCVE-2023-00036.5 Medium
- Show moreLoading…