cve.bz

fedoraproject fedora vulnerabilities, newest first, page 24

Filter
  1. 7.8CVE-2022-39832EPSS 0.5%

    An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified oth…

  2. 7.8CVE-2022-39831EPSS 0.5%

    An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspeci…

  3. 7.8CVE-2022-3099EPSS 0.5%

    Use After Free in GitHub repository vim/vim prior to 9.0.0360.

  4. 8.8CVE-2022-39170EPSS 1.2%

    libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.

  5. 7.5CVE-2022-32743EPSS 1.6%

    Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.

  6. 6.5CVE-2022-1632EPSS 0.4%

    An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to e…

  7. 5.5CVE-2022-1615EPSS 0.5%

    In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

  8. 6.5CVE-2021-3826EPSS 1.5%

    Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

  9. 7.0CVE-2022-3028EPSS 0.2%

    A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of…

  10. 5.5CVE-2022-2153EPSS 0.5%

    A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local att…

  11. 8.6CVE-2022-2132EPSS 2.4%

    A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

  12. 6.1CVE-2022-1355EPSS 0.6%

    A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and cau…

  13. 5.5CVE-2022-1354EPSS 0.6%

    A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash …

  14. 7.0CVE-2022-1247EPSS 0.3%

    An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the ro…

  15. 7.8CVE-2022-3037EPSS 0.5%

    Use After Free in GitHub repository vim/vim prior to 9.0.0322.

  16. 7.8CVE-2022-38784EPSS 0.6%

    Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of …

  17. 7.0CVE-2022-2961EPSS 0.3%

    A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or po…

  18. 5.5CVE-2022-1204EPSS 0.4%

    A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

  19. 7.8CVE-2022-0367EPSS 0.5%

    A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

  20. 8.8CVE-2022-0336EPSS 1.8%

    The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds …

  21. 5.5CVE-2022-35020EPSS 0.5%

    Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.

  22. 5.5CVE-2022-35019EPSS 0.4%

    Advancecomp v2.3 was discovered to contain a segmentation fault.

  23. 5.5CVE-2022-35018EPSS 0.4%

    Advancecomp v2.3 was discovered to contain a segmentation fault.

  24. 5.5CVE-2022-35017EPSS 0.5%

    Advancecomp v2.3 was discovered to contain a heap buffer overflow.

  25. 5.5CVE-2022-35016EPSS 0.5%

    Advancecomp v2.3 was discovered to contain a heap buffer overflow.

  26. 5.5CVE-2022-35015EPSS 0.5%

    Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.

  27. 5.5CVE-2022-35014EPSS 0.4%

    Advancecomp v2.3 contains a segmentation fault.

  28. 7.8CVE-2022-3016EPSS 0.5%

    Use After Free in GitHub repository vim/vim prior to 9.0.0286.

  29. 5.5CVE-2022-38791EPSS 0.3%

    In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

  30. 4.4CVE-2022-0216EPSS 0.4%

    A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a ma…

  31. 5.5CVE-2021-3669EPSS 0.3%

    A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.

  32. 3.3CVE-2021-3574EPSS 0.5%

    A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.

  33. 5.5CVE-2022-38533EPSS 0.3%

    In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.

  34. 7.8CVE-2022-2982EPSS 0.9%

    Use After Free in GitHub repository vim/vim prior to 9.0.0260.

  35. 5.5CVE-2022-2980EPSS 0.9%

    NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.

  36. 6.5CVE-2021-3979EPSS 0.6%

    A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confide…

  37. 8.2CVE-2021-3929EPSS 0.7%

    A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvme_ctrl_reset(), data structs will be …

  38. 6.7CVE-2021-35938EPSS 0.5%

    A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security…

  39. 6.4CVE-2021-35937EPSS 0.3%

    A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threa…

  40. 7.5CVE-2022-22728EPSS 5.9%

    A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.

  41. 8.8CVE-2022-32893KEVEPSS 9.9%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code exec…

  42. 7.5CVE-2022-32793EPSS 1.1%

    Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.

  43. 3.3CVE-2021-4217EPSS 0.6%

    A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code e…

  44. 7.8CVE-2022-31676EPSS 0.5%

    VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

  45. 7.8CVE-2022-2938EPSS 0.3%

    A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side effects.

  46. 5.5CVE-2021-3997EPSS 1.7%

    A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.

  47. 5.5CVE-2021-3996EPSS 0.6%

    A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are …

  48. 5.5CVE-2021-3995EPSS 0.6%

    A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain…

  49. 6.5CVE-2021-3975EPSS 1.6%

    A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virC…

  50. 6.5CVE-2022-37428EPSS 1.4%

    PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specif…