Fedora
CVEs (5,359)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-42326 | Med | 0.36 | 5.5 | 0.00 | Nov 1, 2022 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the… | ||
| CVE-2022-42325 | Med | 0.36 | 5.5 | 0.00 | Nov 1, 2022 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the… | ||
| CVE-2022-42324 | Med | 0.36 | 5.5 | 0.00 | Nov 1, 2022 | Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-bit builds, it truncates… | ||
| CVE-2022-42323 | Med | 0.36 | 5.5 | 0.00 | Nov 1, 2022 | Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be… | ||
| CVE-2022-42322 | Med | 0.36 | 5.5 | 0.00 | Nov 1, 2022 | Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be… | ||
| CVE-2022-42310 | Med | 0.36 | 5.5 | 0.00 | Nov 1, 2022 | Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the… | ||
| CVE-2022-44020 | Med | 0.36 | 5.5 | 0.00 | Oct 30, 2022 | An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like… | ||
| CVE-2022-3620 | Med | 0.36 | 5.6 | 0.01 | Oct 20, 2022 | A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is… | ||
| CVE-2022-39253 | Med | 0.36 | 5.5 | 0.01 | Oct 19, 2022 | Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and… | ||
| CVE-2022-33748 | Med | 0.36 | 5.6 | 0.00 | Oct 11, 2022 | lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can… | ||
| CVE-2022-30674 | Med | 0.36 | 5.5 | 0.01 | Sep 16, 2022 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue… | ||
| CVE-2022-3169 | Med | 0.36 | 5.5 | 0.00 | Sep 9, 2022 | A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect. | ||
| CVE-2022-1615 | Med | 0.36 | 5.5 | 0.00 | Sep 1, 2022 | In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values. | ||
| CVE-2022-1204 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system. | ||
| CVE-2022-35020 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc. | ||
| CVE-2022-35019 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a segmentation fault. | ||
| CVE-2022-35018 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a segmentation fault. | ||
| CVE-2022-35017 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. | ||
| CVE-2022-35016 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow. | ||
| CVE-2022-35015 | Med | 0.36 | 5.5 | 0.00 | Aug 29, 2022 | Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. |
- risk 0.36cvss 5.5epss 0.00
Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the…
- risk 0.36cvss 5.5epss 0.00
Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the…
- risk 0.36cvss 5.5epss 0.00
Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-bit builds, it truncates…
- risk 0.36cvss 5.5epss 0.00
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be…
- risk 0.36cvss 5.5epss 0.00
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be…
- risk 0.36cvss 5.5epss 0.00
Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the…
- risk 0.36cvss 5.5epss 0.00
An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like…
- risk 0.36cvss 5.6epss 0.01
A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is…
- risk 0.36cvss 5.5epss 0.01
Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and…
- risk 0.36cvss 5.6epss 0.00
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can…
- risk 0.36cvss 5.5epss 0.01
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue…
- risk 0.36cvss 5.5epss 0.00
A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.
- risk 0.36cvss 5.5epss 0.00
In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
- risk 0.36cvss 5.5epss 0.00
A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a segmentation fault.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a segmentation fault.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
- risk 0.36cvss 5.5epss 0.00
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
Page 152 of 268