Fedora vulnerabilities
Published CVEs affecting Fedora products: 4 record(s), with severity, exploitation and fixes.
CVE-2023-32665
Medium · 5.5
CWE-502 Sep 14, 2023
Gvariant deserialisation does not match spec for non-normal data
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVE-2023-32611
Medium · 5.5
CWE-400 Sep 14, 2023
G_variant_byteswap() can take a long time with some non-normal inputs
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVE-2023-29499
High · 7.5
CWE-400 Sep 14, 2023
Gvariant offset table entry size is not checked in is_normal()
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
CVE-2023-3338
Medium · 6.5
CWE-476 Jun 30, 2023
Crash due to a null pointer dereference in the dn_nsp_send function
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.