Skip to contentFedoraproject vulnerabilities
Newest
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.cCVE-2023-38253Fix available4.7 Medium
- tats w3m, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in strnew_size() at w3m/str.cCVE-2023-38252Fix available4.7 Medium
- redis, fedoraproject fedora +1 moreHeap overflow issue with the Lua cjson library used by RedisCVE-2022-24834Public exploitFix availableEPSS 41.4%7.0 High
- qt, fedoraproject fedora +1 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6...CVE-2023-38197Fix available7.5 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: netlink socket crash (null pointer deref) in netlink_dump functionCVE-2023-3106Fix available6.6 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- redis, fedoraproject fedora +1 moreHeap overflow in COMMAND GETKEYS and ACL evaluation in RedisCVE-2023-36824Fix availableEPSS 77.4%7.4 High
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +6 more +8 moreASP.NET and Visual Studio Security Feature Bypass VulnerabilityCVE-2023-33170Fix available8.1 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.cCVE-2023-34432Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.cCVE-2023-34318Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.cCVE-2023-32627Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.cCVE-2023-26590Fix available6.2 Medium
- tang project tang, fedora, red hat enterprise linux 7 +3 more +5 moreRace condition exists in the key generation and rotation functionalityCVE-2023-1672Fix available5.3 Medium
- yt-dlp, fedoraproject fedora, youtube-dlc project youtube-dlc +1 more +3 moreyt-dlp File Downloader cookie leakCVE-2023-35934Fix available6.1 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreLinux Kernel nftables Out-Of-Bounds Read/Write VulnerabilityCVE-2023-35001Public exploitFix available7.8 High
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalCVE-2023-3269Public exploitFix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreLinux Kernel nftables Use-After-Free Local Privilege Escalation VulnerabilityCVE-2023-31248Fix available7.8 High
- djangoproject django, debian linux, fedoraproject fedora +2 moreDjango has regular expression denial of service vulnerability in EmailValidator/URLValidatorCVE-2023-36053Fix available7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6...CVE-2023-1206Public exploitFix available5.7 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap-buffer-overflow in coders/tiff.cCVE-2023-3428Fix available6.2 Medium
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreServer-Side Request Forgery (SSRF) in plantuml/plantumlCVE-2023-3432Fix available7.2 High
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreImproper Access Control in plantuml/plantumlCVE-2023-3431Fix available5.3 Medium
- nodejs node, node.js, fedoraproject fedora +2 morellhttp vulnerable to HTTP request smugglingCVE-2023-30589Fix available7.5 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 moreArtifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the ...CVE-2023-36664Public exploitFix available7.8 High
- debian linux, openprinting cups, apple macos +1 more +3 moreCUPS vulnerable to use-after-free in cupsdAcceptClient()CVE-2023-34241Fix available5.3 Medium
- isc bind, bind 9, debian linux +7 more +9 moreExceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0CVE-2023-2911Fix available7.5 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceededCVE-2023-2828Fix available7.5 High
- libreoffice, fedora, red hat enterprise linux 6 +4 more +6 moreArbitrary file writeCVE-2023-1183Fix availableEPSS 64.9%5.0 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- fedoraproject fedora, kubernetes +1 moreBypass of seccomp profile enforcementCVE-2023-2431Fix available3.4 Low
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in...CVE-2023-34475Fix available5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function...CVE-2023-34474Fix available5.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an...CVE-2023-3195Fix available5.5 Medium
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: Configuration option to block the PUSH method in ATS didn't workCVE-2023-30631Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3217Fix availableEPSS 13.3%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3216Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...CVE-2023-3215Fix availableEPSS 13.8%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote...CVE-2023-3214Fix available8.8 High
- vmware tools, debian linux, fedoraproject fedora +2 moreVMware Tools Authentication Bypass VulnerabilityCVE-2023-20867In KEVFix availableEPSS 13.6%3.9 Low
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-...CVE-2023-3161Fix available5.5 Medium
- google grpc, fedoraproject fedora +1 moreDenial-of-Service in gRPCCVE-2023-32732Fix available5.3 Medium
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreCode injection via go command with cgo in cmd/goCVE-2023-29402Fix available9.8 Critical
- go standard library runtime, golang go, fedoraproject fedora +2 moreUnsafe behavior in setuid/setgid binaries in runtimeCVE-2023-29403Fix available7.8 High
- go toolchain cmd/go, golang go, fedoraproject fedora +1 more +3 moreImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/goCVE-2023-29405Fix available9.8 Critical
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreImproper handling of non-optional LDFLAGS in go command with cgo in cmd/goCVE-2023-29404Fix available9.8 Critical
- freedesktop dbus, debian linux, fedoraproject fedora +3 more +5 moreD-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged...CVE-2023-34969Fix available6.5 Medium
- yajl project yajl, debian linux, fedoraproject fedora +2 moreThere's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of...CVE-2023-33460Fix available6.5 Medium
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to...CVE-2023-3079In KEVPublic exploitFix availableEPSS 37.9%8.8 High
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...CVE-2023-34410Fix available5.3 Medium
- Show moreLoading…