Fedora vulnerabilities
90 CVEs and advisories name Fedora as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-3180Heap buffer overflow in virtio_crypto_sym_op_helper()
- CVE-2023-32248Tree connection null pointer dereference denial-of-service vulnerability
- CVE-2023-32257Session race condition remote code execution vulnerability
- CVE-2023-32252Session null pointer dereference denial-of-service vulnerability
- CVE-2023-32258Session race condition remote code execution vulnerability
- CVE-2023-1386Qemu: 9pfs: suid/sgid bits not dropped on file write
- CVE-2023-32247Session setup memory exhaustion denial-of-service vulnerability
- CVE-2023-3748Inifinite loop in babld message parsing may cause dos
- CVE-2023-2860Out-of-bounds read when setting hmac data
- CVE-2023-3863Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c
- CVE-2023-3603Processing sftp server read may cause null dereference
- CVE-2023-0160Possibility of deadlock in libbpf function sock_hash_delete_elem
- CVE-2023-38253W3m: out of bounds read in growbuf_to_str() at w3m/indep.c
- CVE-2023-3618Segmentation fault in fax3encode in libtiff/tif_fax3.c
- CVE-2023-3354Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- CVE-2023-1672Race condition exists in the key generation and rotation functionality
- CVE-2023-3269Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal
- CVE-2023-34432Heap-buffer-overflow in src/formats_i.c
- CVE-2023-34318Heap-buffer-overflow in src/hcom.c
- CVE-2023-32627Floating point exception in src/voc.c
- CVE-2023-26590Floating point exception in src/aiff.c
- CVE-2023-32254Tree connection race condition remote code execution vulnerability
- CVE-2023-32250Session race condition remote code execution vulnerability
- CVE-2023-1183Arbitrary file write
- CVE-2023-3338Crash due to a null pointer dereference in the dn_nsp_send function
- CVE-2023-2908Libtiff: null pointer dereference in tif_dir.c
- CVE-2023-3355Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
- CVE-2016-4983A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.
- CVE-2018-1111DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager i
- CVE-2010-3872Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c