Fedora

fedora

Vendor: Fedoraproject • 5,361 CVEs

CVEs (5,361)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-6311 2Fedoraproject Gnome 2Fedora Gdk Pixbuf May 13, 2026 Mar 10, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message.
CVE-2016-7972 3Fedoraproject Libass ProjectOpensuse 4Fedora LeapLibass+1 more May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors.
CVE-2016-7970 2Fedoraproject Libass Project 2Fedora Libass May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2016-7969 3Fedoraproject Libass ProjectOpensuse 4Fedora LeapLibass+1 more May 13, 2026 Mar 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization."
CVE-2017-5885 2Fedoraproject Gnome 2Fedora Gtk Vnc May 13, 2026 Feb 28, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code...Show more Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc before 0.7.0 allow remote servers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving SetColorMapEntries, which triggers a buffer overflow.Show less
CVE-2017-5884 2Fedoraproject Gnome 2Fedora Gtk Vnc May 13, 2026 Feb 28, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyr...Show more gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.Show less
CVE-2016-9956 3Debian FedoraprojectFlightgear 3Debian Linux FedoraFlightgear May 13, 2026 Feb 22, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
CVE-2016-9400 2Fedoraproject Teeworlds 2Fedora Teeworlds May 13, 2026 Feb 22, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involvin...Show more The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.Show less
CVE-2017-5357 2Fedoraproject Gnu 2Ed Fedora May 13, 2026 Feb 17, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free.
CVE-2016-6233 2Fedoraproject Zend 2Fedora Zend Framework May 13, 2026 Feb 17, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regu...Show more The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression.Show less
CVE-2016-4861 2Fedoraproject Zend 2Fedora Zend Framework May 13, 2026 Feb 17, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement befo...Show more The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.Show less
CVE-2016-8693 3Fedoraproject Jasper ProjectOpensuse 3Fedora JasperOpensuse May 13, 2026 Feb 15, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the...Show more Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.Show less
CVE-2016-8692 3Debian FedoraprojectJasper Project 3Debian Linux FedoraJasper May 13, 2026 Feb 15, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP im...Show more The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.Show less
CVE-2016-8691 3Debian FedoraprojectJasper Project 3Debian Linux FedoraJasper May 13, 2026 Feb 15, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP im...Show more The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted XRsiz value in a BMP image to the imginfo command.Show less
CVE-2016-8690 2Fedoraproject Jasper Project 2Fedora Jasper May 13, 2026 Feb 15, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.
CVE-2016-6866 2Fedoraproject Suckless 2Fedora Slock May 13, 2026 Feb 15, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.
CVE-2013-7459 2Dlitz Fedoraproject 2Fedora Pycrypto May 13, 2026 Feb 15, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg....Show more Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv parameter to cryptmsg.py.Show less
CVE-2016-4797 2Fedoraproject Uclouvain 2Fedora Openjpeg May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists be...Show more Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947.Show less
CVE-2016-4796 2Fedoraproject Uclouvain 2Fedora Openjpeg May 13, 2026 Feb 3, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.
CVE-2016-9108 2Artifex Fedoraproject 2Fedora Mujs May 13, 2026 Feb 3, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafte...Show more Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.Show less

Previous 1...236237238...269 Next