Skip to contentFedoraproject vulnerabilities
Newest
- ryzen™ pro 5000 series desktop processors, amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors +178 more +180 moreA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the...CVE-2023-20569Fix available4.7 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- imagemagick, fedoraproject fedora +1 moreImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption)...CVE-2023-39978Fix available3.3 Low
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +8 more +10 more.NET and Visual Studio Denial of Service VulnerabilityCVE-2023-38180In KEVFix availableEPSS 14.1%7.5 High
- debian linux, fedoraproject fedora, intel microcode +136 more +138 moreImproper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a...CVE-2023-23908Fix available6.0 Medium
- debian linux, fedoraproject fedora, intel xeon bronze 3408u firmware +189 more +191 moreUnauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors...CVE-2022-41804Fix available7.2 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidCVE-2023-4194Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreOut-of-bounds read information disclosure vulnerabilityCVE-2023-4135Fix available6.0 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()CVE-2023-4134Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: smsusb: use-after-free caused by do_submit_urb()CVE-2023-4132Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: cxgb4: use-after-free in ch_flower_stats_cb()CVE-2023-4133Fix available5.5 Medium
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()CVE-2023-3180Fix available6.0 Medium
- rust-lang cargo, fedoraproject fedora +1 moreCargo not respecting umask when extracting crate archivesCVE-2023-38497Public exploitFix available7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a...CVE-2023-4073Fix available8.8 High
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive CPU consumption when decoding 0-height images in golang.org/x/image/tiffCVE-2023-29407Fix available6.5 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive resource consumption in golang.org/x/image/tiffCVE-2023-29408Fix available6.5 Medium
- fedoraproject fedora, linux kernal, procps project procps +3 more +5 moreUnder some circumstances, this weakness allows a user who has access to run the “ps” utility on a...CVE-2023-4016Fix available2.5 Low
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dosCVE-2023-38559Fix available5.5 Medium
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: vnc: infinite loop in inflate_buffer() leads to denial of serviceCVE-2023-3255Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- certifi, certifi python-certifi, fedoraproject fedora +6 more +8 moreCertifi's removal of e-Tugra root certificateCVE-2023-37920Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file writeCVE-2023-13863.3 Low
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connectionsCVE-2023-38200Fix available7.5 High
- gnome librsvg, debian linux, fedoraproject fedora +2 moreA directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local...CVE-2023-38633Fix available5.5 Medium
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: memory leak in tiffcrop.cCVE-2023-3576Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +2 moreKeylime: attestation failure when the quote's signature does not validateCVE-2023-3674Fix available2.3 Low
- openbsd openssh, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...CVE-2023-38408Public exploitFix availableEPSS 79.7%9.8 Critical
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosureCVE-2023-34968Fix available5.3 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlightCVE-2023-34967Fix availableEPSS 61.2%5.3 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: infinite loop in mdssvc rpc service for spotlightCVE-2023-34966Fix availableEPSS 62.4%7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 moreSamba: smb2 packet signing is not enforced when "server signing = required" is setCVE-2023-3347Fix available5.9 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: out-of-bounds read in winbind auth_crapCVE-2022-2127Fix available5.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2023-22058Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ...CVE-2023-22057Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2023-22056Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2023-22054Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). ...CVE-2023-22053Fix available5.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). ...CVE-2023-22048Fix available3.1 Low
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...CVE-2023-22046Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...CVE-2023-22038Fix available2.7 Low
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2023-22033Fix available4.4 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...CVE-2023-22008Fix available4.9 Medium
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). ...CVE-2023-22005Fix available4.4 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossibility of deadlock in libbpf function sock_hash_delete_elemCVE-2023-0160Fix available4.7 Medium
- es iperf3, apple macos, debian linux +3 more +5 moreiperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted...CVE-2023-38403Fix available7.5 High
- Show moreLoading…