Fedora

CVEs (790)

• CVE-2015-0381Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.00cvss —epss 0.05

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382.

• CVE-2015-0374Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.00cvss —epss 0.03

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key.

• CVE-2014-9601Jan 16, 2015
  Python (programming language)

  Pillow
  risk 0.00cvss —epss 0.05

  Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

• CVE-2015-1051Jan 15, 2015
  Drupal

  Context
  risk 0.00cvss —epss 0.02

  Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.

• CVE-2014-8738Jan 15, 2015
  GNU

  Binutils
  risk 0.00cvss —epss 0.05

  The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended name table in an archive.

• CVE-2014-9585Jan 9, 2015
  Linux

  Kernel
  risk 0.00cvss —epss 0.01

  The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

• CVE-2014-9529Jan 9, 2015
  Linux

  Kernel
  risk 0.00cvss —epss 0.00

  Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key…

• CVE-2014-9221Jan 7, 2015
  Strongswan

  Strongswan
  risk 0.00cvss —epss 0.04

  strongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) via a crafted IKEv2 Key Exchange (KE) message with Diffie-Hellman (DH) group 1025.

• CVE-2014-9449Jan 2, 2015
  Exiv2

  Exiv2
  risk 0.00cvss —epss 0.04

  Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

• CVE-2014-8109Dec 29, 2014
  Apache

  HTTP Server
  risk 0.00cvss —epss 0.22

  mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass…

• CVE-2014-8132Dec 29, 2014
  Libssh

  Libssh
  risk 0.00cvss —epss 0.05

  Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.

• CVE-2014-5353Dec 16, 2014
  Mit

  Kerberos 5
  risk 0.00cvss —epss 0.05

  The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with…

• CVE-2014-8124Dec 12, 2014
  OpenStack

  Horizon
  risk 0.00cvss —epss 0.03

  OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

• CVE-2014-8488Dec 10, 2014
  Yourls

  Yourls
  risk 0.00cvss —epss 0.02

  Cross-site scripting (XSS) vulnerability in the administrator panel in Yourls 1.7 allows remote attackers to inject arbitrary web script or HTML via a URL that is processed by the Shorten functionality.

• CVE-2014-9274Dec 9, 2014
  Unrtf Project

  Unrtf
  risk 0.00cvss —epss 0.06

  UnRTF allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code as demonstrated by a file containing the string "{\cb-999999999".

• CVE-2014-8737Dec 9, 2014
  GNU

  Binutils
  risk 0.00cvss —epss 0.01

  Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an…

• CVE-2014-8504Dec 9, 2014
  GNU

  Binutils
  risk 0.00cvss —epss 0.06

  Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.

• CVE-2014-8503Dec 9, 2014
  GNU

  Binutils
  risk 0.00cvss —epss 0.06

  Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.

• CVE-2014-8502Dec 9, 2014
  GNU

  Binutils
  risk 0.00cvss —epss 0.05

  Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.

• CVE-2014-8501Dec 9, 2014
  GNU

  Binutils
  risk 0.00cvss —epss 0.05

  The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE…