Fedora

fedora

Vendor: Fedoraproject • 5,353 CVEs

CVEs (5,353)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-6851 5Debian FedoraprojectOracle+2 more 12Debian Linux Enterprise LinuxEnterprise Linux Desktop+9 more Jun 17, 2026 Jan 13, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
CVE-2020-6377 5Debian FedoraprojectGoogle+2 more 7Backports Sle ChromeDebian Linux+4 more Jun 17, 2026 Jan 10, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-13767 4Debian FedoraprojectGoogle+1 more 4Backports Sle ChromeDebian Linux+1 more Jun 17, 2026 Jan 10, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6750 2Fedoraproject Gnome 2Fedora Glib Jun 17, 2026 Jan 9, 2020 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is...Show more GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled. This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected.Show less
CVE-2019-5188 6Canonical DebianE2fsprogs Project+3 more 7Debian Linux E2fsprogsFedora+4 more Jun 17, 2026 Jan 8, 2020 N/A· v4 6.7 MEDIUM· v3 4.4 MEDIUM· v2 A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An...Show more A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.Show less
CVE-2019-14834 2Fedoraproject Thekelleys 2Dnsmasq Fedora Jun 17, 2026 Jan 7, 2020 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.
CVE-2019-19911 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraPillow+1 more Jun 17, 2026 Jan 5, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results...Show more There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.Show less
CVE-2020-5395 3Fedoraproject FontforgeOpensuse 3Fedora FontforgeLeap Jun 17, 2026 Jan 3, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.
CVE-2012-4451 3Fedoraproject RedhatZend 3Enterprise Linux FedoraZend Framework Nov 21, 2024 Jan 3, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Fo...Show more Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.Show less
CVE-2020-5313 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraPillow+1 more Jun 17, 2026 Jan 3, 2020 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
CVE-2020-5312 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraPillow+1 more Jun 17, 2026 Jan 3, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
CVE-2020-5311 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraPillow+1 more Jun 17, 2026 Jan 3, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
CVE-2020-5310 3Canonical FedoraprojectPython 3Fedora PillowUbuntu Linux Jun 17, 2026 Jan 3, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
CVE-2013-4752 2Fedoraproject Sensiolabs 2Fedora Symfony Nov 21, 2024 Jan 2, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generati...Show more Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generating an absolute URL. A remote attacker could exploit this vulnerability to inject malicious content into the Web application page and conduct various attacks.Show less
CVE-2013-4357 5Canonical DebianEglibc+2 more 5Debian Linux EglibcFedora+2 more Nov 21, 2024 Dec 31, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
CVE-2013-4161 2Fedoraproject Gksu Polkit Project 2Fedora Gksu Polkit Nov 21, 2024 Dec 31, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue.
CVE-2019-20176 2Fedoraproject Pureftpd 2Fedora Pure Ftpd Jun 17, 2026 Dec 31, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c.
CVE-2012-5645 2Fedoraproject Freeciv 2Fedora Freeciv Nov 21, 2024 Dec 30, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exha...Show more A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.Show less
CVE-2012-5474 4Debian FedoraprojectOpenstack+1 more 4Debian Linux FedoraHorizon+1 more Nov 21, 2024 Dec 30, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.
CVE-2019-20093 2Fedoraproject Podofo Project 2Fedora Podofo Jun 17, 2026 Dec 30, 2019 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.

Previous 1...192193194...268 Next