- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2024-2746Incomplete fix for CVE-2024-1929 | Exploitation statusNot known exploited | FixNot confirmed | Affected productdnf5daemon-server | Published05/08/2024 | SeverityHigh |
CVE-2024-1929Local Root Exploit via Configuration Dictionary | Exploitation statusPublic exploit | FixNot confirmed | Affected productdnf5daemon-server | Published05/08/2024 | SeverityHigh |
CVE-2024-1930No Limit on Number of Open Sessions / Bad Session Close Behaviour | Exploitation statusNot known exploited | FixNot confirmed | Affected productdnf5daemon-server | Published05/08/2024 | SeverityMedium |
CVE-2023-4235Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published04/17/2024 | SeverityHigh |
CVE-2023-4234Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published04/17/2024 | SeverityHigh |
CVE-2023-4233Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published04/17/2024 | SeverityHigh |
CVE-2023-4232Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published04/17/2024 | SeverityHigh |
CVE-2023-3966Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published02/22/2024 | SeverityHigh |
CVE-2024-1312Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published02/08/2024 | SeverityMedium |
CVE-2021-4435Yarn: untrusted search path | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published02/04/2024 | SeverityHigh |
CVE-2023-6780Glibc: integer overflow in __vsyslog_internal() | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora | Published01/31/2024 | SeverityMedium |
CVE-2023-6779Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published01/31/2024 | SeverityHigh |
CVE-2023-6246Glibc: heap-based buffer overflow in __vsyslog_internal() | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora | Published01/31/2024 | SeverityHigh |
CVE-2023-6258Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published01/30/2024 | SeverityHigh |
CVE-2023-6200Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published01/28/2024 | SeverityHigh |
CVE-2023-6395Mock: privilege escalation for users that can access mock configuration | Exploitation statusNot known exploited | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published01/16/2024 | SeverityMedium |
CVE-2023-7090Sudo: improper handling of ipa_hostname leads to privilege mismanagement | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/23/2023 | SeverityMedium |
CVE-2023-4255W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published12/21/2023 | SeverityMedium |
CVE-2023-4256Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c | Exploitation statusNot confirmed | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published12/21/2023 | SeverityMedium |
CVE-2023-3430Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp | Exploitation statusNot confirmed | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published12/18/2023 | SeverityHigh |
CVE-2023-6560Kernel: io_uring out of boundary memory access in __io_uaddr_map() | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published12/08/2023 | SeverityMedium |
CVE-2023-5972Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published11/23/2023 | SeverityHigh |
CVE-2023-6238Kernel: nvme: memory corruption via unprivileged user passthrough | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/21/2023 | SeverityMedium |
CVE-2023-6039Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/09/2023 | SeverityMedium |
CVE-2023-4154Samba: ad dc password exposure to privileged users and rodcs | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published11/07/2023 | SeverityHigh |
CVE-2023-1194Use-after-free in parse_lease_state() | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published11/03/2023 | SeverityHigh |
CVE-2022-4900Potential buffer overflow in php_cli_server_startup_workers | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-38473Reachable assertion in avahi_alternative_host_name | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-38472Reachable assertion in avahi_rdata_parse | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-38471Reachable assertion in dbus_set_host_name | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-38470Reachable assertion in avahi_escape_label | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-38469Reachable assertion in avahi_dns_packet_append_record | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-3164Heap-buffer-overflow in extractimagesection() | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora | Published11/02/2023 | SeverityMedium |
CVE-2023-1193Use-after-free in setup_async_work() | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/01/2023 | SeverityMedium |
CVE-2023-1192Use-after-free in smb2_is_status_io_timeout() | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published11/01/2023 | SeverityMedium |
CVE-2023-5349Draw while calling getdrawinfo() | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora | Published10/30/2023 | SeverityMedium |
CVE-2023-42752Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/13/2023 | SeverityMedium |
CVE-2023-5366Openvswitch don't match packets on nd_target field | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published10/06/2023 | SeverityHigh |
CVE-2022-4132Memory leak on tls connections | Exploitation statusNot known exploited | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published10/04/2023 | SeverityMedium |
CVE-2023-3153Service monitor mac flow is not rate limited | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published10/04/2023 | SeverityMedium |
CVE-2023-4156Heap out of bound read in builtin.c | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora | Published09/25/2023 | SeverityMedium |
CVE-2023-5158Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/25/2023 | SeverityMedium |
CVE-2023-25584Out of bounds read in parse_module function in bfd/vms-alpha.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published09/14/2023 | SeverityMedium |
CVE-2023-25585Field `file_table` of `struct module *module` is uninitialized | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published09/14/2023 | SeverityMedium |
CVE-2023-25586Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized | Exploitation statusPublic exploit | FixNot confirmed | Affected productbinutils | Published09/14/2023 | SeverityMedium |
CVE-2023-25588Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published09/14/2023 | SeverityMedium |
CVE-2023-32611G_variant_byteswap() can take a long time with some non-normal inputs | Exploitation statusNot known exploited | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published09/14/2023 | SeverityMedium |
CVE-2023-29499Gvariant offset table entry size is not checked in is_normal() | Exploitation statusNot known exploited | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published09/14/2023 | SeverityMedium |
CVE-2023-32665Gvariant deserialisation does not match spec for non-normal data | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora 38 | Published09/14/2023 | SeverityMedium |
CVE-2023-2680Dma reentrancy issue (incomplete fix for cve-2021-3750) | Exploitation statusNot confirmed | FixNot confirmed | Affected productRed Hat Enterprise Linux 9 | Published09/13/2023 | SeverityHigh |
CVE-2023-4155Sev-es / sev-snp vmgexit double fetch vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published09/13/2023 | SeverityMedium |
CVE-2023-3301Triggerable assertion due to race condition in hot-unplug | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published09/13/2023 | SeverityMedium |
CVE-2023-4611Use after free race between mbind() and vma-locked page fault | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/29/2023 | SeverityHigh |
CVE-2023-4569Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/28/2023 | SeverityMedium |
CVE-2023-4394Memory leak in btrfs_get_dev_args_from_path() | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/17/2023 | SeverityMedium |
CVE-2023-4389Kernel: btrfs: double free in btrfs_get_root_ref() | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/16/2023 | SeverityHigh |
CVE-2023-4135Out-of-bounds read information disclosure vulnerability | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published08/04/2023 | SeverityMedium |
CVE-2023-3180Heap buffer overflow in virtio_crypto_sym_op_helper() | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published08/03/2023 | SeverityMedium |
CVE-2023-32248Tree connection null pointer dereference denial-of-service vulnerability | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityHigh |
CVE-2023-32257Session race condition remote code execution vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityHigh |
CVE-2023-32252Session null pointer dereference denial-of-service vulnerability | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityHigh |
CVE-2023-32258Session race condition remote code execution vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityHigh |
CVE-2023-1386Qemu: 9pfs: suid/sgid bits not dropped on file write | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/24/2023 | SeverityLow |
CVE-2023-32247Session setup memory exhaustion denial-of-service vulnerability | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityHigh |
CVE-2023-3748Inifinite loop in babld message parsing may cause dos | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityLow |
CVE-2023-2860Out-of-bounds read when setting hmac data | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityMedium |
CVE-2023-3863Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/24/2023 | SeverityMedium |
CVE-2023-3603Processing sftp server read may cause null dereference | Exploitation statusNot known exploited | FixNot confirmed | Affected productlibssh | Published07/21/2023 | SeverityLow |
CVE-2023-0160Possibility of deadlock in libbpf function sock_hash_delete_elem | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/18/2023 | SeverityMedium |
CVE-2023-38253W3m: out of bounds read in growbuf_to_str() at w3m/indep.c | Exploitation statusNot confirmed | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published07/14/2023 | SeverityMedium |
CVE-2023-3618Segmentation fault in fax3encode in libtiff/tif_fax3.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/12/2023 | SeverityMedium |
CVE-2023-3354Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published07/11/2023 | SeverityHigh |
CVE-2023-1672Race condition exists in the key generation and rotation functionality | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/11/2023 | SeverityMedium |
CVE-2023-3269Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/11/2023 | SeverityHigh |
CVE-2023-34432Heap-buffer-overflow in src/formats_i.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/10/2023 | SeverityHigh |
CVE-2023-34318Heap-buffer-overflow in src/hcom.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/10/2023 | SeverityHigh |
CVE-2023-32627Floating point exception in src/voc.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productExtra Packages for Enterprise Linux | Published07/10/2023 | SeverityMedium |
CVE-2023-26590Floating point exception in src/aiff.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published07/10/2023 | SeverityMedium |
CVE-2023-32254Tree connection race condition remote code execution vulnerability | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/10/2023 | SeverityCritical |
CVE-2023-32250Session race condition remote code execution vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/10/2023 | SeverityCritical |
CVE-2023-1183Arbitrary file write | Exploitation statusNot confirmed | FixNot confirmed | Affected productFedora | Published07/10/2023 | SeverityMedium |
CVE-2023-3338Crash due to a null pointer dereference in the dn_nsp_send function | Exploitation statusPublic exploit | FixNot confirmed | Affected productFedora | Published06/30/2023 | SeverityMedium |
CVE-2023-2908Libtiff: null pointer dereference in tif_dir.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published06/30/2023 | SeverityMedium |
CVE-2023-3355Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c | Exploitation statusNot known exploited | FixNot confirmed | Affected productFedora | Published06/28/2023 | SeverityMedium |
CVE-2016-4983 | Exploitation statusNot confirmed | FixNot confirmed | Affected productdovecot22 | Published11/05/2019 | SeverityUnknown |
CVE-2018-1111 | Exploitation statusPublic exploit | FixNot confirmed | Affected productdhcp | Published05/17/2018 | SeverityHigh |
CVE-2015-1848 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/14/2015 | SeverityUnknown |
CVE-2015-3983 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/14/2015 | SeverityUnknown |
CVE-2010-3872Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/20/2010 | SeverityHigh |
CVE-2008-2929 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/29/2008 | SeverityUnknown |
CVE-2008-2930 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/29/2008 | SeverityUnknown |
CVE-2008-3283 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/29/2008 | SeverityUnknown |
CVE-2008-3252 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/21/2008 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan