Fedoraproject Extra Packages For Enterprise Linux vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fedoraproject Extra Packages For Enterprise Linux: 3 record(s), with affected versions and fixes.cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux
CVE-2024-0232
Medium · 5.5
CWE-416 Jan 16, 2024
Sqlite: use-after-free bug in jsonparseaddnodearray
A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.
CVE-2022-2294
High · 8.8
KEV High · 66 Ransomware CWE-787 Jul 27, 2022
WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-3733
Medium · 6.5
CWE-400 Mar 10, 2022
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.