Fedora

CVEs (5,358)

• CVE-2022-1620HigMay 8, 2022
  Vim

  Vim
  risk 0.00cvss 7.5epss 0.02

  NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.

• CVE-2022-1619HigMay 8, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.03

  Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution

• CVE-2022-1616HigMay 7, 2022
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.03

  Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

• CVE-2022-24903HigMay 6, 2022
  Rsyslog

  Rsyslog
  risk 0.00cvss 8.1epss 0.04

  Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for…

• CVE-2022-24884CriMay 6, 2022
  Ecdsautils Project

  Ecdsautils
  risk 0.00cvss 10.0epss 0.01

  ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge…

• CVE-2022-30292CriMay 4, 2022
  Squirrel Lang

  Squirrel
  risk 0.00cvss 10.0epss 0.04

  Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.

• CVE-2022-28487HigMay 4, 2022
  Broadcom Corporation

  Tcpreplay
  risk 0.00cvss 7.5epss 0.02

  Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.

• CVE-2022-27470HigMay 4, 2022
  Sdl

  SDL_ttf
  risk 0.00cvss 7.8epss 0.01

  SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.

• CVE-2022-29824MedMay 3, 2022
  Libxslt

  libxslt
  risk 0.00cvss 6.5epss 0.04

  In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software…

• CVE-2022-29968HigMay 2, 2022
  Linux

  Kernel
  risk 0.00cvss 7.8epss 0.01

  An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

• CVE-2022-1227HigApr 29, 2022
  Podman

  Podman
  risk 0.00cvss 8.8epss 0.04

  A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the…

• CVE-2022-29869MedApr 28, 2022
  cifs-utils

  cifs-utils
  risk 0.00cvss 5.3epss 0.02

  cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

• CVE-2022-24736LowApr 27, 2022
  Redis

  Redis
  risk 0.00cvss 3.3epss 0.01

  Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua script can cause NULL pointer dereference which will result with a crash of the redis-server process. The problem is fixed in Redis…

• CVE-2022-24735LowApr 27, 2022
  Redis

  Redis
  risk 0.00cvss 3.9epss 0.02

  Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the (potentially higher) privileges of another…

• CVE-2022-1507MedApr 27, 2022
  hpjansson

  chafa
  risk 0.00cvss 5.5epss 0.01

  chafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in GitHub repository hpjansson/chafa prior to 1.10.2. chafa: NULL Pointer Dereference in function…

• CVE-2022-27239HigApr 27, 2022
  cifs-utils

  cifs-utils
  risk 0.00cvss 7.8epss 0.01

  In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

• CVE-2022-24883HigApr 26, 2022
  Freerdp

  Freerdp
  risk 0.00cvss 7.4epss 0.02

  FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not…

• CVE-2022-24882CriApr 26, 2022
  Freerdp

  Freerdp
  risk 0.00cvss 9.1epss 0.03

  FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP…

• CVE-2022-1420MedApr 21, 2022
  Vim

  Vim
  risk 0.00cvss 5.5epss 0.01

  Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.

• CVE-2021-42782MedApr 18, 2022
  Opensc Project

  Opensc
  risk 0.00cvss 5.3epss 0.03

  Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.