Skip to contentFedoraproject vulnerabilities
Newest
- linux ofono, fedoraproject fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() functionCVE-2023-2794Fix available8.1 High
- rust-lang rust, fedoraproject fedora +1 moreRusts's `std::process::Command` did not properly escape arguments of batch files on WindowsCVE-2024-24576Public exploitFix availableEPSS 20.3%10.0 Critical
- libarchive, fedoraproject fedora, microsoft windows 11 version 22h2 +6 more +8 moreLibarchive Remote Code Execution VulnerabilityCVE-2024-26256Fix availableEPSS 87.9%7.8 High
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modulesCVE-2024-24795Fix available6.3 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP response splittingCVE-2023-38709Public exploitFix available7.3 High
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreRemote Code Execution Vulnerability through the validate binary path API in pgAdmin 4CVE-2024-3116Public exploitFix availableEPSS 65.8%7.4 High
- nodejs undici, fedoraproject fedora +1 moreUndici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrectCVE-2024-30261Fix available2.6 Low
- nodejs undici, fedoraproject fedora +1 moreUndici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipelineCVE-2024-30260Fix available3.9 Low
- nghttp2, debian linux, fedoraproject fedora +4 more +6 moreReading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usageCVE-2024-28182Fix availableEPSS 82.0%5.3 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote...CVE-2024-3159Fix available8.8 High
- python pillow, debian linux, fedoraproject fedora +2 morePillow buffer overflow vulnerabilityCVE-2024-28219Fix available6.7 Medium
- upx, fedoraproject fedora +1 moreUPX bele.h get_ne64 heap-based overflowCVE-2024-3209Fix available5.5 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40...CVE-2024-34506Fix available7.5 High
- arm mbed crypto, mbed tls, fedoraproject fedora +2 more +4 moreAn issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and...CVE-2024-28960Fix available8.2 High
- curl, apple macos, fedoraproject fedora +16 more +18 moreHTTP/2 push headers memory-leakCVE-2024-2398Fix availableEPSS 36.1%8.6 High
- curl, apple macos, fedoraproject fedora +12 more +14 moreUsage of disabled protocolCVE-2024-2004Fix available3.5 Low
- apache http server, fedoraproject fedora, netapp ontap +2 moreApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesCVE-2024-27316Public exploitFix availableEPSS 88.8%7.5 High
- google chrome, fedoraproject fedora +1 moreType Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker...CVE-2024-2887Public exploitFix availableEPSS 17.9%7.7 High
- google chrome, fedoraproject fedora +1 moreUse after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...CVE-2024-2886Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...CVE-2024-2885Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...CVE-2024-2883Fix available8.8 High
- wireshark, fedoraproject fedora +1 moreMismatched Memory Management Routines in WiresharkCVE-2024-2955Fix available7.8 High
- apache commons configuration, fedoraproject fedora, netapp ontap tools +1 more +3 moreApache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()CVE-2024-29131Fix available7.3 High
- apache commons configuration, fedoraproject fedora +1 moreApache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object treeCVE-2024-29133Fix available5.4 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote...CVE-2024-2631Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote...CVE-2024-2630Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...CVE-2024-2629Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a...CVE-2024-2628Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...CVE-2024-2627Fix available8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote...CVE-2024-2626Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreObject lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to...CVE-2024-2625Fix availableEPSS 21.4%8.8 High
- latchset jose, fedoraproject fedora +1 morelatchset jose through version 11 allows attackers to cause a denial of service (CPU consumption)...CVE-2023-50967Fix available7.5 High
- libdwarf project libdwarf, fedoraproject fedora, red hat enterprise linux 7 +2 more +4 moreLibdwarf: crashes randomly on fuzzed objectCVE-2024-2002Fix available7.5 High
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: WebSocket DoS with incomplete closing handshakeCVE-2024-23672Fix available6.3 Medium
- apache tomcat, debian linux, fedoraproject fedora +2 moreApache Tomcat: HTTP/2 header handling DoSCVE-2024-24549Public exploitFix availableEPSS 23.1%7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote...CVE-2024-2400Fix available8.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreNull Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to...CVE-2023-43279Fix available6.5 Medium
- xen, fedoraproject fedora +1 morex86: shadow stack vs exceptions from emulation stubsCVE-2023-46841Fix available6.5 Medium
- libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 morelibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...CVE-2024-28757Public exploitFix available7.5 High
- kozea weasyprint, fedoraproject fedora +1 moreWeasyPrint allows the attachment of arbitrary files and URLs to a PDFCVE-2024-28184Fix available7.4 High
- apple ipados, macos, safari +9 more +11 moreA logic issue was addressed with improved validation. This issue is fixed in tvOS 17.4, macOS...CVE-2024-23263Fix available6.5 Medium
- apple ios, ipados, macos +9 more +11 moreAn injection issue was addressed with improved validation. This issue is fixed in Safari 17.4,...CVE-2024-23280Fix available6.5 Medium
- apple macos, safari, tvos +8 more +10 moreThe issue was addressed with improved UI handling. This issue is fixed in tvOS 17.4, macOS Sonoma...CVE-2024-23254Fix available6.5 Medium
- apple ipados, macos, safari +8 more +10 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 17.4,...CVE-2024-23284Fix available6.5 Medium
- fedoraproject fedora, go-jose +1 moreGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180Fix available4.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 moreUnsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4CVE-2024-2044Public exploitFix availableEPSS 79.5%9.9 Critical
- appsup-dart jose, fedoraproject fedora +1 morejose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintextCVE-2024-28176Fix available4.9 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreDenial of service when trimming EDE text on positive repliesCVE-2024-1931Fix available7.5 High
- squid-cache squid, fedoraproject fedora, netapp bluexp +2 moreSQUID-2024:1 Denial of Service in HTTP Chunked DecodingCVE-2024-25111Fix availableEPSS 65.3%8.6 High
- google chrome, fedoraproject fedora +1 moreUse after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to...CVE-2024-2176Fix available8.8 High
- Show moreLoading…