Skip to contentFedoraproject vulnerabilities
Newest
- lipnitsk libcue, debian linux, fedoraproject fedora +2 morelibcue vulnerable to out-of-bounds array accessCVE-2023-43641Fix availableEPSS 17.1%8.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap use-after-free in coders/bmp.cCVE-2023-5341Fix available6.2 Medium
- arm mbed tls, fedoraproject fedora, mbed mbedtls +2 moreMbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.CVE-2023-43615Fix available7.5 High
- facebook tac plus, fedoraproject fedora +1 moreA lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent…CVE-2023-45239Public exploit9.8 Critical
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreArbitrary code execution during build via line directives in cmd/goCVE-2023-39323Fix available8.1 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vimCVE-2023-5441Fix available6.2 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()CVE-2023-42754Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: ebpf: insufficient stack type checks in dynptrCVE-2023-39191Fix available8.2 High
- djangoproject django, fedoraproject fedora +1 moreDjango Denial-of-service in django.utils.text.TruncatorCVE-2023-43665Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to...CVE-2023-5346Fix available8.8 High
- linux kernel, fedoraproject fedora +1 moreUse-after-free in Linux kernel's fs/smb/client componentCVE-2023-5345Fix available7.8 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- libxpm project libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read on xpm with corrupted colormapCVE-2023-43789Fix available5.5 Medium
- x.org libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read in xpmcreatexpmimagefrombuffer()CVE-2023-43788Fix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflowCVE-2023-43787Fix available7.8 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()CVE-2023-43786Public exploitFix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()CVE-2023-43785Fix available6.5 Medium
- python urllib3, debian linux, fedoraproject fedora +2 more`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804Public exploitFix available5.9 Medium
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vimCVE-2023-5344Fix available4.0 Medium
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44488Fix available7.5 High
- composer, debian linux, fedoraproject fedora +2 moreRemote Code Execution via web-accessible composer.pharCVE-2023-43655Fix available6.4 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...CVE-2023-5187Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...CVE-2023-5186Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- webkit, webkitgtk, debian linux +1 more +3 moreA use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A...CVE-2023-39928Fix available8.8 High
- neutrinolabs xrdp, fedoraproject fedora +1 moreUnchecked access to font glyph info in xrdpCVE-2023-42822Fix available4.6 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- apple ipados, macos, safari +6 more +8 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS...CVE-2023-41074Fix available8.8 High
- element-hq synapse, fedoraproject fedora +1 moreImproper validation of receipts allows forged read receipts in matrix synapseCVE-2023-42453Fix available3.1 Low
- element-hq synapse, fedoraproject fedora +1 moreTemporary storage of plaintext passwords during password changes in matrix synapseCVE-2023-41335Fix available3.7 Low
- aes-gcm project aes-gcm, rustcrypto aeads, fedoraproject fedora +2 moreAEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failureCVE-2023-42811Fix available4.7 Medium
- pgadmin, pgadmin 4, fedoraproject fedora +2 morePgadmin4: remote code execution by an authenticated userCVE-2023-5002Fix available6.0 Medium
- apple macos, ipad os, ipados +13 more +15 moreThe issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura...CVE-2023-41993In KEVPublic exploitFix availableEPSS 23.7%8.8 High
- snapview tungstenite, fedoraproject fedora +1 moreTungstenite allows remote attackers to cause a denial of serviceCVE-2023-43669Fix available7.5 High
- openprinting cups, libppd, debian linux +1 more +3 moreOpenPrinting CUPS/libppd Postscript Parsing Heap OverflowCVE-2023-4504Public exploitFix available7.0 High
- isc bind, bind 9, debian linux +6 more +8 morenamed may terminate unexpectedly under high DNS-over-TLS query loadCVE-2023-4236Fix available7.5 High
- isc bind, bind 9, debian linux +1 more +3 moreA stack exhaustion flaw in control channel code may cause named to terminate unexpectedlyCVE-2023-3341Fix available7.5 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- artifex ghostscript, fedoraproject fedora +1 moreIn Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution...CVE-2023-43115Public exploitFix available8.8 High
- gnome gnome-shell, fedoraproject fedora +1 moreGnome-shell: screenshot tool allows viewing open windows when session is lockedCVE-2023-43090Fix available5.5 Medium
- curl, fedoraproject fedora, microsoft windows 10 1809 +7 more +9 moreWhen curl retrieves an HTTP response, it stores the incoming headers so that
they can be accessed...CVE-2023-38039Public exploitFix availableEPSS 56.2%7.5 High
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4909Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62...CVE-2023-4908Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62...CVE-2023-4907Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a...CVE-2023-4906Fix available4.3 Medium
- Show moreLoading…