Fedoraproject vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersHigh 8.8 · Feb 1, 2023
• CVE-2022-21797 The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.High 7.3 · Sep 26, 2022
• CVE-2021-3621 A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.High 8.8 · Dec 23, 2021
• CVE-2019-7639 An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29.High 8.1 · Feb 8, 2019
• CVE-2013-0159 The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service High 7.1 · May 1, 2018
• CVE-2017-15365 sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 aHigh 8.8 · Jan 25, 2018
• CVE-2018-5345 A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, execute arbitrary code vHigh 7.8 · Jan 11, 2018
• CVE-2014-8119 The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path exprHigh 7.5 · Dec 29, 2017
• CVE-2015-1854 389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.High 7.5 · Sep 19, 2017
• CVE-2015-1395 Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with tHigh 7.5 · Aug 25, 2017
• CVE-2015-5258 Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.High 8.8 · Aug 22, 2017
• CVE-2015-1783 The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial oHigh 7.5 · Aug 11, 2017
• CVE-2015-6816 ganglia-web before 3.7.1 allows remote attackers to bypass authentication.Critical 9.8 · Aug 9, 2017
• CVE-2015-5300 The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, whicHigh 7.5 · Jul 21, 2017
• CVE-2015-5219 The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackHigh 7.5 · Jul 21, 2017
• CVE-2015-5195 ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen conHigh 7.5 · Jul 21, 2017
• CVE-2015-5194 The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logHigh 7.5 · Jul 21, 2017
• CVE-2017-1000001 FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on.High 7.5 · Jul 17, 2017
• CVE-2016-6342 elog 3.1.1 allows remote attackers to post data as any username in the logbook.High 7.5 · Jun 27, 2017
• CVE-2016-3704 Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.High 7.5 · Jun 13, 2017
• CVE-2016-2173 org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.Critical 9.8 · Apr 21, 2017
• CVE-2016-6299 The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.High 7.8 · Apr 14, 2017
• CVE-2017-5330 ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.High 7.8 · Mar 27, 2017
• CVE-2016-7970 Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vecHigh 7.5 · Mar 3, 2017
• CVE-2017-5885 Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a Critical 9.8 · Feb 28, 2017