Fedora

CVEs (790)

• CVE-2015-7687CriOct 16, 2017
  OpenSMTPD

  OpenSMTPD
  risk 0.64cvss 9.8epss 0.04

  Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.

• CVE-2017-12170CriSep 21, 2017
  Fedoraproject

  Fedora
  risk 0.64cvss 9.8epss 0.02

  Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding…

• CVE-2017-11462CriSep 13, 2017
  Mit

  Kerberos 5
  risk 0.64cvss 9.8epss 0.05

  Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.

• CVE-2015-6816CriAug 9, 2017
  Ganglia

  Web
  risk 0.64cvss 9.8epss 0.04

  ganglia-web before 3.7.1 allows remote attackers to bypass authentication.

• CVE-2016-9961CriJun 6, 2017
  Fedoraproject

  Fedora
  risk 0.64cvss 9.8epss 0.04

  game-music-emu before 0.6.1 mishandles unspecified integer values.

• CVE-2016-5178CriMay 23, 2017
  Google

  Chrome
  risk 0.64cvss 9.8epss 0.02

  Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

• CVE-2016-10243CriMay 2, 2017
  Fedoraproject

  Fedora
  risk 0.64cvss 9.8epss 0.07

  TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.

• CVE-2016-2173CriApr 21, 2017
  Fedoraproject

  Fedora
  risk 0.64cvss 9.8epss 0.06

  org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.

• CVE-2017-5885CriFeb 28, 2017
  Gtk Vnc

  gtk-vnc
  risk 0.64cvss 9.8epss 0.05

  Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a…

• CVE-2016-9400CriFeb 22, 2017
  Teeworlds

  Teeworlds
  risk 0.64cvss 9.8epss 0.04

  The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.

• CVE-2016-6233CriFeb 17, 2017
  Zend

  Framework
  risk 0.64cvss 9.8epss 0.02

  The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression.

• CVE-2016-4861CriFeb 17, 2017
  Zend

  Framework
  risk 0.64cvss 9.8epss 0.04

  The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.

• CVE-2016-2090CriJan 13, 2017
  Libbsd

  libbsd
  risk 0.64cvss 9.8epss 0.03

  Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

• CVE-2016-8606CriJan 12, 2017
  GNU

  Guile
  risk 0.64cvss 9.8epss 0.04

  The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.

• CVE-2016-7953CriDec 13, 2016
  Xorg

  Libxvmc
  risk 0.64cvss 9.8epss 0.03

  Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.

• CVE-2016-7951CriDec 13, 2016
  Xorg

  Libxtst
  risk 0.64cvss 9.8epss 0.02

  Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks.

• CVE-2016-7950CriDec 13, 2016
  Xorg

  Libxrender
  risk 0.64cvss 9.8epss 0.03

  The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.

• CVE-2016-7949CriDec 13, 2016
  Xorg

  Libxrender
  risk 0.64cvss 9.8epss 0.04

  Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.

• CVE-2016-7948CriDec 13, 2016
  Xorg

  Libxrandr
  risk 0.64cvss 9.8epss 0.04

  X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.

• CVE-2016-7947CriDec 13, 2016
  Xorg

  Libxrandr
  risk 0.64cvss 9.8epss 0.04

  Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.