Vulnerabilidades de Fedoraproject

CVE-2021-3737 Alta · 7.5 CWE-400 04/03/2022

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

CVE-2022-0492 Alta · 7.8 KEV Urgente · 73 Exploit público CWE-862 03/03/2022

Linux Kernel Improper Authentication Vulnerability

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

CVE-2022-23308 Alta · 7.5 CWE-416 26/02/2022

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

CVE-2022-24407 Alta · 8.8 CWE-89 24/02/2022

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.

CVE-2021-20320 Média · 5.5 CWE-200 18/02/2022

A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux...

A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem.

CVE-2022-25315 Crítica · 9.8 CWE-190 18/02/2022

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

CVE-2022-25314 Alta · 7.5 CWE-190 18/02/2022

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

CVE-2022-25313 Média · 6.5 CWE-674 18/02/2022

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

CVE-2022-25235 Crítica · 9.8 CWE-116 15/02/2022

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

CVE-2022-0391 Alta · 7.5 CWE-74 09/02/2022

A flaw was found in Python, specifically within the urllib.parse module. This module helps break...

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.

CVE-2022-0530 Média · 5.5 09/02/2022

A flaw was found in unzip 6.0. The vulnerability occurs during the conversion of an utf-8 string...

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVE-2022-0529 Média · 5.5 CWE-787 09/02/2022

A flaw was found in unzip 6.0. The vulnerability occurs during the conversion of wide string to...

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVE-2022-21986 Alta · 7.5 09/02/2022

.NET Denial of Service Vulnerability

CVE-2022-23990 Alta · 7.5 CWE-190 26/01/2022

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

CVE-2022-23134 Média · 5.3 KEV Alta · 63 Exploit público CWE-287 13/01/2022

Zabbix Frontend Improper Access Control Vulnerability

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

CVE-2021-4166 Alta · 7.1 CWE-125 25/12/2021

Out-of-bounds Read in vim/vim

vim is vulnerable to Out-of-bounds Read

CVE-2021-4136 Alta · 7.8 CWE-122 19/12/2021

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

CVE-2021-45046 Crítica · 9.0 KEV Urgente · 90 Exploit público Ransomware CWE-917 14/12/2021

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.

CVE-2021-44228 Crítica · 10.0 KEV Urgente · 100 Exploit público Ransomware CWE-20 10/12/2021

Apache Log4j2 Remote Code Execution Vulnerability

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

CVE-2021-38003 Alta · 8.8 KEV Alta · 62 Exploit público CWE-755 23/11/2021

Google Chromium V8 Memory Corruption Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-38000 Média · 6.1 KEV Alta · 52 CWE-601 23/11/2021

Google Chromium Intents Improper Input Validation Vulnerability

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

CVE-2021-3973 Alta · 7.8 CWE-122 19/11/2021

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

CVE-2021-3968 Alta · 8.0 CWE-122 19/11/2021

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

CVE-2021-3974 Alta · 7.8 CWE-416 19/11/2021

Use After Free in vim/vim

vim is vulnerable to Use After Free

CVE-2021-44026 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-89 19/11/2021

Roundcube Webmail SQL Injection Vulnerability

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.