← Back

Fedora

fedora

Vendor: Fedoraproject • 5,353 CVEs

CVEs (5,353)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
7Apple
DebianF5+4 more
23Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 17, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Nov 21, 2024
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
7Apple
DebianF5+4 more
7Debian Linux
Enterprise LinuxFedora+4 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
6Apple
DebianFedoraproject+3 more
6Debian Linux
Enterprise LinuxFedora+3 more
Dec 3, 2025
Oct 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().
6Debian
FasterxmlFedoraproject+3 more
26Active Iq Unified Manager
Banking PlatformCommunications Billing And Revenue Management+23 more
Jun 17, 2026
Oct 1, 2019
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the se...Show more
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.Show less
6Debian
FasterxmlFedoraproject+3 more
28Active Iq Unified Manager
Banking PlatformCommunications Billing And Revenue Management+25 more
Jun 17, 2026
Oct 1, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the se...Show more
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.Show less
6Canonical
DebianFedoraproject+3 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+5 more
Jun 17, 2026
Oct 1, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2...Show more
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.Show less
4Canonical
DebianFedoraproject+1 more
4Debian Linux
FedoraLinux Kernel+1 more
Jun 17, 2026
Oct 1, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
6Debian
FedoraprojectGolang+3 more
9Cloud Insights Telegraf Agent
Debian LinuxDeveloper Tools+6 more
Jun 17, 2026
Sep 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
4Canonical
DebianExim+1 more
4Debian Linux
EximFedora+1 more
Jun 17, 2026
Sep 27, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.