← Back

Fedoraproject

fedoraproject

5,423 CVEs • 20 products

Products (20)

Click to collapse
Toggle
Fedora
fedora
5,353 CVEs
Extra Packages For Enterprise Linux
extra_packages_for_enterprise_linux
76 CVEs
389 Directory Server
389_directory_server
39 CVEs
Sssd
sssd
19 CVEs
Fedora Core
fedora_core
8 CVEs
Commons
commons
1 CVE
Coolkey
coolkey
1 CVE
Anaconda
anaconda
1 CVE
Crypto Utils
crypto-utils
1 CVE
Arm Installer
arm_installer
1 CVE
Fedmsg
fedmsg
1 CVE
389 Administration Server
389_administration_server
1 CVE
Python Fedora
python-fedora
1 CVE
Spin Kickstarts
spin-kickstarts
1 CVE
Sectool
sectool
1 CVE
Selinux Policy
selinux-policy
1 CVE
Supybot Fedora
supybot-fedora
1 CVE
Fedora Linux Kernel
fedora_linux_kernel
1 CVE
Unbound
unbound
1 CVE
Atomic
atomic
0 CVEs

CVEs (5,423)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1942
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 31, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1927
3Apple
FedoraprojectVim
3Fedora
MacosVim
Jun 17, 2026
May 29, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-1897
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 27, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-1898
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 27, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-26691
4Apple
DebianFedoraproject+1 more
6Cups
CupsDebian Linux+3 more
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.
CVE-2022-22662
2Apple
Fedoraproject
3Fedora
Mac Os XMacos
Jun 17, 2026
May 26, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive us...Show more
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.Show less
CVE-2022-30789
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
CVE-2022-30788
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
CVE-2022-30787
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
CVE-2022-30786
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.
CVE-2022-30785
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.
CVE-2022-30784
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
CVE-2022-30783
3Debian
FedoraprojectTuxera
3Debian Linux
FedoraNtfs 3g
Jun 17, 2026
May 26, 2022
N/A· v4
6.7 MEDIUM· v3
4.6 MEDIUM· v2
An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite.
CVE-2022-1886
2Fedoraproject
Vim
2Fedora
Vim
Jun 17, 2026
May 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1348
2Fedoraproject
Logrotate Project
2Fedora
Logrotate
Jun 17, 2026
May 25, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state fil...Show more
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.Show less
CVE-2022-1851
4Apple
DebianFedoraproject+1 more
4Debian Linux
FedoraMacos+1 more
Jun 17, 2026
May 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2021-42614
2Fedoraproject
Halibut Project
2Fedora
Halibut
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document.
CVE-2021-42613
2Fedoraproject
Halibut Project
2Fedora
Halibut
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document.
CVE-2021-42612
2Fedoraproject
Halibut Project
2Fedora
Halibut
Jun 17, 2026
May 24, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecified impact via a crafted text document.
CVE-2022-29221
3Debian
FedoraprojectSmarty
3Debian Linux
FedoraSmarty
Jun 17, 2026
May 24, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {bloc...Show more
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {block} name or {include} file name. Sites that cannot fully trust template authors should upgrade to versions 3.1.45 or 4.1.1 to receive a patch for this issue. There are currently no known workarounds.Show less