fedoraproject

5,420 tracked vulnerabilities.

CVE-2023-20588 MEDIUM
Debian Linux < 10.0.10240.20345 - Divide By Zero
Aug 08, 2023
CVSS 5.5
EPSS 0.07
CVE-2023-20569 MEDIUM
Fedora - Information Disclosure
Aug 08, 2023
CVSS 4.7
EPSS 0.02
CVE-2023-39978 LOW
ImageMagick < 6.9.12-91 - Denial of Service via Memory Consumption in Magick::Draw
Aug 08, 2023
CVSS 3.3
EPSS 0.00
CVE-2023-4194 MEDIUM
Linux Kernel < 6.4 - Unauthorized Resource Access via TUN/TAP Socket UID Initialization
Aug 07, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-4147 HIGH
Linux Kernel >=5.9 <5.10.190 - Use-After-Free in Netfilter NFTA_RULE_CHAIN_ID
Aug 07, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-38497 HIGH
Cargo < 0.72.2 - Incorrect Permission Assignment for Critical Resource
Aug 04, 2023
CVSS 7.9
EPSS 0.06
CVE-2023-4135 MEDIUM
QEMU 8.0.0-8.0.x - Heap Out-of-bounds Read in Virtual NVMe Device
Aug 04, 2023
CVSS 6.0
EPSS 0.00
CVE-2023-4133 MEDIUM
Linux Kernel < 6.3 - Use-After-Free in cxgb4 Driver via Flower Stats Timer Rearming
Aug 03, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-4132 MEDIUM
Linux Kernel < 6.2.16 - Use-After-Free in siano smsusb Module
Aug 03, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-3180 MEDIUM
QEMU < 8.1.0 - Heap-based Buffer Overflow in virtio_crypto_sym_op_helper
Aug 03, 2023
CVSS 6.0
EPSS 0.00
CVE-2023-4073 HIGH
Google Chrome <115.0.5790.170 - Memory Corruption
Aug 03, 2023
CVSS 8.8
EPSS 0.01
CVE-2023-29408 MEDIUM
golang/image < 0.10.0 - Denial of Service via TIFF Tile Decompression
Aug 02, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-29407 MEDIUM
golang/image < 0.10.0 - Excessive Iteration via Malicious Tiled Image
Aug 02, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-4016 LOW
procps 3.3.0-4.0.2 - Heap-based Buffer Overflow via ps Utility
Aug 02, 2023
CVSS 2.5
EPSS 0.00
CVE-2023-38559 MEDIUM
Ghostscript < 10.02.0 - Denial of Service via Crafted PDF File for DEVN Device
Aug 01, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-4004 HIGH
Linux Kernel >=5.6 <5.10.188 - Use-After-Free in netfilter nft_pipapo_remove
Jul 31, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-37920 HIGH
certifi >=2015.4.28 <2023.7.22 - Insufficient Verification of Data Authenticity
Jul 25, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-3773 MEDIUM
Linux Kernel - Out-of-bounds Read in XFRM Netlink Attribute Parsing
Jul 25, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-3772 MEDIUM
Linux Kernel - Denial of Service via NULL Pointer Dereference in XFRM Subsystem
Jul 25, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-38200 HIGH
Keylime < 7.4.0 - Denial of Service via SSL Connection Exhaustion
Jul 24, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-1386 LOW
QEMU - Improper Preservation of Permissions in 9p Passthrough Filesystem
Jul 24, 2023
CVSS 3.3
EPSS 0.00
CVE-2023-38633 MEDIUM
librsvg 2.42.3-2.46.6 - Directory Traversal via URL Decoder
Jul 22, 2023
CVSS 5.5
EPSS 0.44
CVE-2023-3347 MEDIUM
Samba 4.17.0-4.17.9 - Improper Enforcement of Message Integrity in SMB2 Packet Signing
Jul 20, 2023
CVSS 5.9
EPSS 0.00
CVE-2023-34968 MEDIUM
Samba < 4.16.11 - Path Disclosure via Spotlight Protocol
Jul 20, 2023
CVSS 5.3
EPSS 0.02
CVE-2023-34967 MEDIUM
Samba < 4.16.11 - Denial of Service via mdssvc RPC Spotlight Type Confusion
Jul 20, 2023
CVSS 5.3
EPSS 0.19