fedoraproject
5,423 tracked vulnerabilities.
CVE-2020-6851
HIGH
OpenJPEG < 2.3.1 - Heap-Based Buffer Overflow in opj_t1_clbl_decode_processor
Jan 13, 2020
CVSS 7.5
EPSS 0.05
CVE-2020-6377
HIGH
Google Chrome <79.0.3945.117 - Use After Free
Jan 10, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-6750
MEDIUM
GNOME GLib 2.60.0-2.62.4 - Proxy Bypass via GSocketClient Address Mishandling
Jan 09, 2020
CVSS 5.9
EPSS 0.02
CVE-2020-5395
HIGH
FontForge 20190801 - Use-After-Free in SFD_GetFontMetaData
Jan 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-5313
HIGH
Pillow < 6.2.2 - Out-of-bounds Read in FLI Buffer Handling
Jan 03, 2020
CVSS 7.1
EPSS 0.03
CVE-2020-5312
CRITICAL
Pillow < 6.2.2 - Buffer Overflow in PCX P Mode Decoder
Jan 03, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-5311
CRITICAL
Pillow < 6.2.2 - Buffer Overflow in SGI Image Decoder
Jan 03, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-5310
HIGH
Pillow < 6.2.2 - Integer Overflow in TIFF Decoding
Jan 03, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-25058
HIGH
USBGuard <1.1.0 - Privilege Escalation
Feb 24, 2022
CVSS 7.8
EPSS 0.00
CVE-2019-25051
HIGH
GNU Aspell 0.60.8 - Buffer Overflow
Jul 20, 2021
CVSS 7.8
EPSS 0.01
CVE-2019-17567
MEDIUM
Apache HTTP Server 2.4.6-2.4.46 - HTTP Request Smuggling via mod_proxy_wstunnel
Jun 10, 2021
CVSS 5.3
EPSS 0.60
CVE-2019-12067
MEDIUM
QEMU - Denial of Service via NULL Pointer Dereference in ahci_commit_buf
Jun 02, 2021
CVSS 6.5
EPSS 0.00
CVE-2019-10196
CRITICAL
http-proxy-agent < 2.1.0 - Denial of Service and Data Exposure via Auth Parameter
Mar 19, 2021
CVSS 9.8
EPSS 0.01
CVE-2019-19005
HIGH
autotrace 0.31.1 - Double Free via Malformed Bitmap Image
Feb 11, 2021
CVSS 7.8
EPSS 0.01
CVE-2019-19004
LOW
autotrace 0.31.1 - Integer Overflow in input-bmp.c
Feb 11, 2021
CVSS 3.3
EPSS 0.01
CVE-2019-25013
MEDIUM
GNU C Library <2.32 - Buffer Overflow
Jan 04, 2021
CVSS 5.9
EPSS 0.04
CVE-2019-20919
MEDIUM
Perl DBI <1.643 - Memory Corruption
Sep 17, 2020
CVSS 4.7
EPSS 0.01
CVE-2019-20907
HIGH
Python < 3.5.10 - Denial of Service via Crafted TAR Archive
Jul 13, 2020
CVSS 7.5
EPSS 0.06
CVE-2019-13033
LOW
CISOfy Lynis 2.0.0-2.7.5 - Exposure of Sensitive Information via Process List
Jun 18, 2020
CVSS 3.3
EPSS 0.00
CVE-2019-18823
CRITICAL
HTCondor <8.8.6-8.9.4 - Privilege Escalation
Apr 27, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-20790
CRITICAL
OpenDMARC <= 1.3.2 and 1.4.x - Authentication Bypass via HELO/MAIL FROM Inconsistency
Apr 27, 2020
CVSS 9.8
EPSS 0.03
CVE-2019-14905
MEDIUM
Ansible Engine < 2.7.16 - OS Command Injection via nxos_file_copy Module
Mar 31, 2020
CVSS 5.6
EPSS 0.01
CVE-2019-14855
HIGH
GnuPG < 2.2.18 - Certificate Signature Forgery via SHA-1 Collision
Mar 20, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-20485
MEDIUM
libvirt < 6.0.0 - Denial of Service via Guest Agent Query Monitor Job
Mar 19, 2020
CVSS 5.7
EPSS 0.01
CVE-2019-18183
CRITICAL
pacman < 5.2 - OS Command Injection via Crafted Delta File in apply_deltas()
Feb 24, 2020
CVSS 9.8
EPSS 0.04
Products
fedora 5,353
extra_packages_for_enterprise_linux 76
389_directory_server 39
sssd 19
fedora_core 8
389_administration_server 1
anaconda 1
arm_installer 1
commons 1
coolkey 1
crypto-utils 1
fedmsg 1
fedora_linux_kernel 1
python-fedora 1
sectool 1
selinux-policy 1
spin-kickstarts 1
supybot-fedora 1
unbound 1
Quick Filters