Browse CVEs

HIGH 7.5 CVE-2022-32743 Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it. Fedora 4.17.0+ Fix from $1,9502022-09-01 MEDIUM 6.5 CVE-2021-3826 Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmen… Fedora Patch available Fix from $1,6002022-09-01 MEDIUM 5.5 CVE-2022-1615 In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values. Fedora 4.17.0+ Fix from $1,6002022-09-01 HIGH 8.6 CVE-2022-2132 A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a c… Fedora 19.11 / 20.11+ Fix from $1,9502022-08-31 MEDIUM 6.1 CVE-2022-1355 A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiff… Fedora 4.4.0+ Fix from $1,6002022-08-31 MEDIUM 5.5 CVE-2022-1354 A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TI… Fedora 4.4.0+ Fix from $1,6002022-08-31 HIGH 7.8 CVE-2022-3037 Use After Free in GitHub repository vim/vim prior to 9.0.0322. Fedora 9.0.0322+ Fix from $1,9502022-08-30 HIGH 8.8 CVE-2022-0336 The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the … Fedora 4.13.17 / 4.14.12+ Fix from $1,9502022-08-29 HIGH 7.8 CVE-2022-0367 A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. Fedora 3.1.7+ Fix from $1,9502022-08-29 MEDIUM 5.5 CVE-2022-35018 Advancecomp v2.3 was discovered to contain a segmentation fault. Fedora No fix yet Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2022-35019 Advancecomp v2.3 was discovered to contain a segmentation fault. Fedora No fix yet Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2022-35020 Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interc… Fedora No fix yet Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2022-35014 Advancecomp v2.3 contains a segmentation fault. Fedora No fix yet Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2022-35015 Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. Fedora No fix yet Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2022-35016 Advancecomp v2.3 was discovered to contain a heap buffer overflow. Fedora No fix yet Fix from $1,6002022-08-29 MEDIUM 5.5 CVE-2022-35017 Advancecomp v2.3 was discovered to contain a heap buffer overflow. Fedora No fix yet Fix from $1,6002022-08-29 HIGH 7.8 CVE-2022-3016 Use After Free in GitHub repository vim/vim prior to 9.0.0286. Fedora 9.0.0286+ Fix from $1,9502022-08-28 MEDIUM 5.5 CVE-2022-38533 In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new v… Fedora after 2.39 Fix from $1,6002022-08-26 HIGH 8.2 CVE-2021-3929 A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when… Fedora 7.0.0+ Fix from $1,9502022-08-25 HIGH 7.8 CVE-2022-2982 Use After Free in GitHub repository vim/vim prior to 9.0.0260. Fedora 9.0.0260+ Fix from $1,9502022-08-25 MEDIUM 6.7 CVE-2021-35938 A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged… Fedora 4.18.0+ Fix from $1,6002022-08-25 MEDIUM 5.5 CVE-2022-2980 NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. Fedora 9.0.0259+ Fix from $1,6002022-08-25 HIGH 7.5 CVE-2022-32793 Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6,… Fedora 8.7 / 12.5+ Fix from $1,9502022-08-24 MEDIUM 5.5 CVE-2021-3995 A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This fla… Fedora 2.37.3+ Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2021-3996 A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This fla… Fedora 2.37.3+ Fix from $1,6002022-08-23 MEDIUM 5.5 CVE-2021-3997 A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested director… Fedora 250.2+ Fix from $1,6002022-08-23 MEDIUM 6.5 CVE-2022-37428 PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading… Fedora 4.5.10 / 4.6.3+ Fix from $1,6002022-08-23 HIGH 7.8 CVE-2022-2946 Use After Free in GitHub repository vim/vim prior to 9.0.0246. Fedora 9.0.0246+ Fix from $1,9502022-08-23 HIGH 7.5 CVE-2021-3839 A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly c… Fedora 22.03+ Fix from $1,9502022-08-23 HIGH 7.8 CVE-2021-23177 An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacke… Fedora Patch available Fix from $1,9502022-08-23