Vulnerabilidades de Fedora
CVEs publicadas que afetam produtos de Fedora: 4 registro(s), com severidade, exploração e correções.
CVE-2023-32665
Média · 5.5
CWE-502 14/09/2023
Gvariant deserialisation does not match spec for non-normal data
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVE-2023-32611
Média · 5.5
CWE-400 14/09/2023
G_variant_byteswap() can take a long time with some non-normal inputs
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
CVE-2023-29499
Alta · 7.5
CWE-400 14/09/2023
Gvariant offset table entry size is not checked in is_normal()
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
CVE-2023-3338
Média · 6.5
CWE-476 30/06/2023
Crash due to a null pointer dereference in the dn_nsp_send function
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.