Skip to contentFedoraproject vulnerabilities
Newest
- freerdp, fedoraproject fedora +1 moreFreeRDP Out-Of-Bounds Read in planar_skip_plane_rleCVE-2024-32458Fix available9.8 Critical
- freerdp, fedoraproject fedora +1 moreFreeRDP OutOfBound Read in zgfx_decompress_segmentCVE-2024-32041Fix available9.8 Critical
- freerdp, fedoraproject fedora +1 moreFreeRDP vulnerable to integer underflow in nsc_rle_decodeCVE-2024-32040Fix available8.1 High
- freerdp, fedoraproject fedora +1 moreFreeRDP Integer overflow & OutOfBound Write in clear_decompress_residual_dataCVE-2024-32039Fix available9.8 Critical
- tcpdf project tcpdf, fedoraproject fedora +1 moreTCPDF vulnerable to Regular Expression Denial of ServiceCVE-2024-22640Public exploitFix available7.5 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...CVE-2023-51798Fix available7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...CVE-2023-51797Fix available6.7 Medium
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...CVE-2023-51796Fix available3.6 Low
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...CVE-2023-51795Fix available8.0 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute...CVE-2023-51791Fix available7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...CVE-2023-50010Fix available7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...CVE-2023-50009Fix available8.0 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...CVE-2023-50008Fix available7.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...CVE-2023-50007Fix available4.0 Medium
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...CVE-2023-49502Fix available8.8 High
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute...CVE-2023-49501Fix available8.0 High
- fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 moreSssd: race condition during authorization leads to gpo policies functioning inconsistentlyCVE-2023-3758Fix available7.1 High
- flatpak, fedoraproject fedora +1 moreFlatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsingCVE-2024-32462Public exploitFix available8.4 High
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp vulnerable to XSS on index pages for static file handlingCVE-2024-27306Fix available6.1 Medium
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() functionCVE-2023-4235Fix available8.1 High
- linux ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() functionCVE-2023-4234Fix available8.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() functionCVE-2023-4233Fix available8.1 High
- ofono project ofono, fedora +1 moreOfono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() functionCVE-2023-4232Fix available8.1 High
- google chrome, v8, fedoraproject fedora +2 moreUse after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to...CVE-2024-3914Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote...CVE-2024-3847Fix available6.1 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote...CVE-2024-3846Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote...CVE-2024-3845Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a...CVE-2024-3844Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a...CVE-2024-3843Fix available4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed...CVE-2024-3841Fix available6.1 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed...CVE-2024-3840Fix available7.5 High
- google chrome, fedoraproject fedora +1 moreObject corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote...CVE-2024-3833Fix availableEPSS 17.6%8.8 High
- google chrome, fedoraproject fedora +1 moreObject corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to...CVE-2024-3832Fix available8.8 High
- ffmpeg, fedoraproject fedora +1 moreFFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in...CVE-2024-31585Fix available5.3 Medium
- ffmpeg, fedoraproject fedora +1 moreFFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the...CVE-2024-31582Fix available7.8 High
- ffmpeg, fedoraproject fedora +1 moreFFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability...CVE-2024-31581Fix available9.8 Critical
- ffmpeg, fedoraproject fedora +1 moreFFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init...CVE-2024-31578Fix available7.5 High
- libcoap, fedoraproject fedora +1 moreAn issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a...CVE-2024-31031Fix available7.5 High
- oracle mysql, oracle corporation mysql server, debian linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). ...CVE-2024-21096Fix available4.9 Medium
- pydantic, fedoraproject fedora +1 moreRegular expression denial of service in Pydantic < 2.4.0CVE-2024-3772Fix available5.9 Medium
- putty, tigris tortoisesvn, tortoisegit +3 more +5 moreIn PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to...CVE-2024-31497Public exploitFix available5.9 Medium
- php, fedoraproject fedora +1 moreCommand injection via array-ish $command parameter of proc_open()CVE-2024-1874Public exploitFix availableEPSS 32.8%9.4 Critical
- xen, fedoraproject fedora +1 morex86: Incorrect logic for BTC/SRSO mitigationsCVE-2024-31142Fix availableEPSS 17.4%7.5 High
- xen, fedoraproject fedora +1 morex86 HVM hypercalls may trigger Xen bug checkCVE-2023-46842Fix available6.5 Medium
- ffmpeg, fedoraproject fedora +1 moreBuffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to...CVE-2023-49528Fix available8.0 High
- dnspython, eventlet, fedoraproject fedora +1 more +3 morePotential DoS via the Tudoor mechanism in eventlet and dnspythonCVE-2023-29483Fix available7.0 High
- google chrome, fedoraproject fedora +1 moreUse after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to...CVE-2024-3515Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker...CVE-2024-3516Fix available6.5 Medium
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a...CVE-2024-3157Fix available9.6 Critical
- apache traffic server, debian linux, fedoraproject fedora +2 moreApache Traffic Server: HTTP/2 CONTINUATION frames can be utilized for DoS attackCVE-2024-31309Fix availableEPSS 92.5%7.5 High
- Show moreLoading…