Browse CVEs

MEDIUM 5.5 CVE-2022-35017 Advancecomp v2.3 was discovered to contain a heap buffer overflow. Fedora No fix yet Fix from $1,6002022-08-29 HIGH 7.8 CVE-2022-37047 The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this … Fedora No fix yet Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-37048 The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: … Fedora No fix yet Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-37049 The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is dif… Fedora No fix yet Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-38223 There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It … Fedora No fix yet Fix from $1,9502022-08-15 HIGH 7.5 CVE-2022-38150 In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1… Fedora Mitigation only Fix from $1,9502022-08-11 MEDIUM 5.5 CVE-2022-2476 A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ==============================… Fedora No fix yet Fix from $1,6002022-07-19 MEDIUM 6.5 CVE-2022-29901 Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak… Fedora Mitigation only Fix from $1,6002022-07-12 MEDIUM 6.5 CVE-2022-32325 JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. Fedora No fix yet Fix from $1,6002022-07-01 HIGH 7.8 CVE-2021-42612 A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecified impac… Fedora No fix yet Fix from $1,9502022-05-24 HIGH 7.8 CVE-2021-42613 A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact vi… Fedora No fix yet Fix from $1,9502022-05-24 HIGH 7.8 CVE-2021-42614 A use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified oth… Fedora No fix yet Fix from $1,9502022-05-24 MEDIUM 6.1 CVE-2022-28919 HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename. Fedora No fix yet Fix from $1,6002022-05-12 MEDIUM 6.5 CVE-2022-27337 A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. Fedora No fix yet Fix from $1,6002022-05-05 HIGH 7.5 CVE-2022-25844 The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possib… Fedora No fix yet Fix from $1,9502022-05-01 MEDIUM 5.5 CVE-2022-28506 There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. Fedora No fix yet Fix from $1,6002022-04-25 MEDIUM 5.5 CVE-2022-1122 A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fai… Fedora Mitigation only Fix from $1,6002022-03-29 MEDIUM 6.5 CVE-2022-26280 Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init. Fedora No fix yet Fix from $1,6002022-03-28 HIGH 7.8 CVE-2022-27940 tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. Fedora No fix yet Fix from $1,9502022-03-26 HIGH 7.8 CVE-2022-27941 tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. Fedora No fix yet Fix from $1,9502022-03-26 HIGH 7.8 CVE-2022-27942 tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. Fedora No fix yet Fix from $1,9502022-03-26 MEDIUM 5.5 CVE-2022-27939 tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. Fedora No fix yet Fix from $1,6002022-03-26 MEDIUM 5.5 CVE-2022-27943 libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. Fedora No fix yet Fix from $1,6002022-03-26 MEDIUM 6.5 CVE-2022-0856 libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service Fedora No fix yet Fix from $1,6002022-03-10 HIGH 7.5 CVE-2022-0725 A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vuln… Fedora Mitigation only Fix from $1,9502022-03-10 MEDIUM 6.5 CVE-2021-34342 Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak. Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34339 Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and lead… Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34340 Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault… Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34341 Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and … Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34338 Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and lea… Fedora No fix yet Fix from $1,6002022-03-10