Vulnerabilidades do Fedoraproject Extra Packages For Enterprise Linux
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fedoraproject Extra Packages For Enterprise Linux: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux
CVE-2024-0232
Média · 5.5
CWE-416 16/01/2024
Sqlite: use-after-free bug in jsonparseaddnodearray
A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.
CVE-2022-2294
Alta · 8.8
KEV Alta · 66 Ransomware CWE-787 27/07/2022
WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-3733
Média · 6.5
CWE-400 10/03/2022
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.