Fedora

fedora

Vendor: Fedoraproject • 5,361 CVEs

CVEs (5,361)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-6299 2Fedoraproject Mock Project 2Fedora Scm Plugin May 13, 2026 Apr 14, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file.
CVE-2015-8567 6Canonical DebianFedoraproject+3 more 10Debian Linux FedoraLeap+7 more May 13, 2026 Apr 13, 2017 N/A· v4 7.7 HIGH· v3 6.8 MEDIUM· v2 Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
CVE-2015-1839 2Fedoraproject Saltstack 2Fedora Salt May 13, 2026 Apr 13, 2017 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
CVE-2015-1838 2Fedoraproject Saltstack 2Fedora Salt May 13, 2026 Apr 13, 2017 N/A· v4 5.3 MEDIUM· v3 4.6 MEDIUM· v2 modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
CVE-2014-9114 3Fedoraproject KernelOpensuse 3Fedora OpensuseUtil Linux May 13, 2026 Mar 31, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
CVE-2016-8884 2Fedoraproject Jasper Project 2Fedora Jasper May 13, 2026 Mar 28, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vu...Show more The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.Show less
CVE-2016-9243 3Canonical Cryptography.ioFedoraproject 3Cryptography FedoraUbuntu Linux May 13, 2026 Mar 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
CVE-2017-5330 2Fedoraproject Kde 2Ark Fedora May 13, 2026 Mar 27, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
CVE-2016-10132 2Artifex Fedoraproject 2Fedora Mujs May 13, 2026 Mar 24, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regular expression compilation.
CVE-2016-9399 3Fedoraproject Jasper ProjectOpensuse 3Fedora JasperLeap May 13, 2026 Mar 23, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
CVE-2016-9398 4Fedoraproject Jasper ProjectOpensuse+1 more 6Fedora JasperLeap+3 more May 13, 2026 Mar 23, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
CVE-2016-9397 2Fedoraproject Jasper Project 2Fedora Jasper May 13, 2026 Mar 23, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
CVE-2016-8887 2Fedoraproject Jasper Project 2Fedora Jasper May 13, 2026 Mar 23, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference).
CVE-2016-6225 3Fedoraproject OpensusePercona 3Fedora LeapXtrabackup May 13, 2026 Mar 23, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information...Show more xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.Show less
CVE-2015-4645 2Fedoraproject Squashfs Project 2Fedora Squashfs May 13, 2026 Mar 17, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based...Show more Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which triggers a stack-based buffer overflow.Show less
CVE-2017-5849 2Fedoraproject Netpbm Project 2Fedora Netpbm May 13, 2026 Mar 15, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related...Show more tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.Show less
CVE-2016-7103 7Debian FedoraprojectJqueryui+4 more 13Application Express Business IntelligenceDebian Linux+10 more May 13, 2026 Mar 15, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
CVE-2017-6314 3Debian FedoraprojectGnome 3Debian Linux FedoraGdk Pixbuf May 13, 2026 Mar 10, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file.
CVE-2017-6313 3Debian FedoraprojectGnome 3Debian Linux FedoraGdk Pixbuf May 13, 2026 Mar 10, 2017 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO...Show more Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file.Show less
CVE-2017-6312 3Debian FedoraprojectGnome 3Debian Linux FedoraGdk Pixbuf May 13, 2026 Mar 10, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out...Show more Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.Show less

Previous 1...235236237...269 Next