CVE Intelligence

Fedoraproject vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Fedoraproject products: 420 record(s), with severity, exploitation and fixes.

Fedora 405Sssd 13Extra Packages For Enterprise Linux 3Fedora Linux 1GraphicsMagick 1

Exploited only (KEV) →

CVE-2022-2294 High · 8.8 KEV High · 66 Ransomware CWE-787 Jul 27, 2022
WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-2345 High · 7.8 CWE-416 Jul 8, 2022
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0046.
CVE-2022-2344 High · 7.8 CWE-122 Jul 8, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.
CVE-2022-2343 High · 7.8 CWE-122 Jul 8, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.
CVE-2022-32208 Medium · 5.9 CWE-787 Jul 7, 2022
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...
When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.
CVE-2022-32207 Critical · 9.8 CWE-276 Jul 7, 2022
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
CVE-2022-32206 Medium · 6.5 CWE-770 Jul 7, 2022
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...
curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable "links" in this "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a "malloc bomb", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.
CVE-2022-32205 Medium · 4.3 CWE-770 Jul 7, 2022
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven't expired. Due to cookie matching rules, a server on `foo.example.com` can set cookies that also would match for `bar.example.com`, making it it possible for a "sister server" to effectively cause a denial of service for a sibling site on the same second level domain using this method.
CVE-2022-2304 High · 7.8 CWE-121 Jul 5, 2022
Stack-based Buffer Overflow in vim/vim
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2097 Medium · 5.3 CWE-327 Jul 5, 2022
AES OCB fails to encrypt some bytes
AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).
CVE-2022-2287 High · 7.1 CWE-125 Jul 2, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2286 High · 7.8 CWE-125 Jul 2, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2285 High · 7.8 CWE-190 Jul 2, 2022
Integer Overflow or Wraparound in vim/vim
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
CVE-2022-2284 High · 7.8 CWE-122 Jul 2, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
CVE-2022-2257 High · 7.8 CWE-125 Jun 30, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
CVE-2022-2210 High · 7.8 CWE-787 Jun 27, 2022
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-2208 Medium · 5.5 CWE-476 Jun 27, 2022
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
CVE-2022-2207 High · 7.8 CWE-122 Jun 27, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2206 High · 7.8 CWE-125 Jun 26, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2183 High · 7.8 CWE-125 Jun 23, 2022
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2182 High · 7.8 CWE-122 Jun 23, 2022
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-33070 Medium · 5.5 Jun 23, 2022
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function...
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVE-2022-2175 High · 7.8 CWE-125 Jun 23, 2022
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2068 High · 7.3 CWE-78 Jun 21, 2022
The c_rehash script allows command injection
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).
CVE-2022-2129 High · 7.8 CWE-787 Jun 19, 2022
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.