Browse CVEs

MEDIUM 5.5 CVE-2021-3933 An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and… Fedora 3.1.2+ Fix from $1,6002022-03-25 HIGH 7.5 CVE-2022-24778 The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for… Fedora 1.1.4+ Fix from $1,9502022-03-25 HIGH 7.5 CVE-2022-27227EPSS 5% In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and… Fedora 4.4.3 / 4.4.8+ Fix from $1,9502022-03-25 MEDIUM 5.9 CVE-2022-24769 Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to… Fedora 1.1.2 / 20.10.14+ Fix from $1,6002022-03-24 MEDIUM 6.8 CVE-2021-25220 BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions o… Fedora 9.11.37 / 9.16.27+ Fix from $1,6002022-03-23 MEDIUM 5.3 CVE-2022-0396 BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP strea… Fedora 9.16.27+ Fix from $1,6002022-03-23 MEDIUM 6.1 CVE-2021-23648 The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function. Fedora 6.0.0+ Fix from $1,6002022-03-16 MEDIUM 6.5 CVE-2021-20257 An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_de… Fedora 6.2.0+ Fix from $1,6002022-03-16 HIGH 7.5 CVE-2021-45848 Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file… Fedora 3.2.1+ Fix from $1,9502022-03-15 HIGH 7.8 CVE-2022-0943 Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. Fedora 8.2.4563 / 13.0+ Fix from $1,9502022-03-14 HIGH 7.8 CVE-2022-20001 fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-re… Fedora after 3.3.1 Fix from $1,9502022-03-14 HIGH 7.8 CVE-2022-26981 Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c). Fedora 8.7 / 12.5+ Fix from $1,9502022-03-13 CRITICAL 9.1 CVE-2022-0860 Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. Fedora 3.3.2+ Fix from $2,3002022-03-11 MEDIUM 6.5 CVE-2022-0856 libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service Fedora No fix yet Fix from $1,6002022-03-10 HIGH 7.5 CVE-2022-0725 A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vuln… Fedora Mitigation only Fix from $1,9502022-03-10 HIGH 8.8 CVE-2022-0204 A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files … Fedora 5.63+ Fix from $1,9502022-03-10 MEDIUM 5.5 CVE-2021-44269 An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_util… Fedora Patch available Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34342 Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak. Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34339 Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and lead… Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34340 Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault… Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34341 Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and … Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-34338 Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and lea… Fedora No fix yet Fix from $1,6002022-03-10 MEDIUM 6.5 CVE-2021-32436 An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unsp… Fedora Patch available Fix from $1,6002022-03-10 MEDIUM 5.5 CVE-2021-32434 abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c. Fedora Patch available Fix from $1,6002022-03-10 MEDIUM 5.5 CVE-2021-32435 Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via uns… Fedora Patch available Fix from $1,6002022-03-10 MEDIUM 6.3 CVE-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability Fedora 7.0.9 / 7.1.6+ Fix from $1,6002022-03-09 HIGH 7.5 CVE-2022-24464 .NET and Visual Studio Denial of Service Vulnerability Fedora 16.7.26 / 16.9.18+ Fix from $1,9502022-03-09 MEDIUM 6.5 CVE-2022-24737 HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that bel… Fedora 3.1.0+ Fix from $1,6002022-03-07 MEDIUM 6.5 CVE-2021-3638 An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MM… Fedora after 6.1.0 Fix from $1,6002022-03-03 HIGH 7.8 CVE-2022-26126 Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notific… Fedora 8.2+ Fix from $1,9502022-03-03