Browse CVEs

HIGH 8.0 CVE-2022-39369 phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The … Fedora 1.6.0+ Fix from $1,9502022-11-01 HIGH 7.1 CVE-2022-42327 x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the gl… Fedora Patch available Fix from $1,9502022-11-01 MEDIUM 6.5 CVE-2022-42311 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabi… Fedora Patch available Fix from $1,6002022-11-01 MEDIUM 5.5 CVE-2022-44020 An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packa… Fedora 0.21.1 / 3.0.0+ Fix from $1,6002022-10-30 HIGH 7.8 CVE-2022-41974 multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. … Fedora 0.9.2+ Fix from $1,9502022-10-29 HIGH 7.8 CVE-2022-41973 multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local use… Fedora 0.9.2+ Fix from $1,9502022-10-29 HIGH 7.5 CVE-2022-3705 A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the… Fedora 9.0.0805+ Fix from $1,9502022-10-26 CRITICAL 9.1 CVE-2021-46848 GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. Fedora 4.19.0+ Fix from $2,3002022-10-24 CRITICAL 9.8 CVE-2022-3620 A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the componen… Fedora 4.97+ Fix from $2,3002022-10-20 MEDIUM 5.3 CVE-2022-21626 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are a… Fedora after 11.70.2 Fix from $1,6002022-10-18 MEDIUM 5.3 CVE-2022-21628 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported vers… Fedora after 11.70.2 Fix from $1,6002022-10-18 MEDIUM 5.3 CVE-2022-21618 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affec… Fedora after 11.70.2 Fix from $1,6002022-10-18 MEDIUM 5.3 CVE-2020-15853 supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops re… Supybot Fedora Mitigation only Fix from $1,6002022-10-18 HIGH 7.8 CVE-2022-41751 Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option. Fedora Patch available Fix from $1,9502022-10-17 HIGH 7.5 CVE-2022-3559 A vulnerability was found in Exim and classified as problematic. This issue affects some unknown processing of the component Regex Handler. The manip… Fedora 4.97+ Fix from $1,9502022-10-17 MEDIUM 6.5 CVE-2022-3165 An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could … Fedora after 7.1.0 Fix from $1,6002022-10-17 HIGH 7.5 CVE-2022-2963 A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a crash or… Fedora Patch available Fix from $1,9502022-10-14 HIGH 7.5 CVE-2022-39282 FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read… Fedora 2.8.1+ Fix from $1,9502022-10-12 HIGH 7.5 CVE-2022-39283 FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read unini… Fedora 2.8.1+ Fix from $1,9502022-10-12 HIGH 7.8 CVE-2022-41032 NuGet Client Elevation of Privilege Vulnerability Fedora 16.9.26 / 16.11.20+ Fix from $1,9502022-10-11 MEDIUM 6.5 CVE-2022-33746 P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its… Fedora after 4.16.1 Fix from $1,6002022-10-11 MEDIUM 5.6 CVE-2022-33748 lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing … Fedora Patch available Fix from $1,6002022-10-11 MEDIUM 6.5 CVE-2022-42010 An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-… Fedora 1.12.24 / 1.14.4+ Fix from $1,6002022-10-10 MEDIUM 6.5 CVE-2022-42011 An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-… Fedora 1.12.24 / 1.14.4+ Fix from $1,6002022-10-10 MEDIUM 6.5 CVE-2022-42012 An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-… Fedora 1.12.24 / 1.14.4+ Fix from $1,6002022-10-10 CRITICAL 9.8 CVE-2022-3275 Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if th… Fedora 9.0.0+ Fix from $2,3002022-10-07 HIGH 7.5 CVE-2022-41556 A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount… Fedora 1.4.67+ Fix from $1,9502022-10-06 HIGH 7.8 CVE-2022-3352 Use After Free in GitHub repository vim/vim prior to 9.0.0614. Fedora 9.0.0614+ Fix from $1,9502022-09-29 MEDIUM 6.2 CVE-2014-0147 Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash … Fedora Patch available Fix from $1,6002022-09-29 MEDIUM 5.9 CVE-2022-39264 nheko is a desktop client for the Matrix communication application. All versions below 0.10.2 are vulnerable homeservers inserting malicious secrets,… Fedora 0.10.2+ Fix from $1,6002022-09-28