Fedoraproject

Fedora

5319 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.7

CVE-2023-22038

  • EPSS 0.03%
  • Veröffentlicht 18.07.2023 21:15:13
  • Zuletzt bearbeitet 21.11.2024 07:44:09

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via ...

4.9

CVE-2023-22008

  • EPSS 0.04%
  • Veröffentlicht 18.07.2023 21:15:12
  • Zuletzt bearbeitet 21.11.2024 07:44:05

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to ...

4.4

CVE-2023-22005

  • EPSS 0.04%
  • Veröffentlicht 18.07.2023 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:44:05

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multipl...

5.5

CVE-2023-0160

Exploit
  • EPSS 0.01%
  • Veröffentlicht 18.07.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 07:36:39

A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.

7.5

CVE-2023-38403

  • EPSS 1.25%
  • Veröffentlicht 17.07.2023 21:15:09
  • Zuletzt bearbeitet 21.11.2024 08:13:29

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

5.5

CVE-2023-38253

Exploit
  • EPSS 0.02%
  • Veröffentlicht 14.07.2023 18:15:11
  • Zuletzt bearbeitet 21.11.2024 08:13:11

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

5.5

CVE-2023-38252

Exploit
  • EPSS 0.02%
  • Veröffentlicht 14.07.2023 18:15:10
  • Zuletzt bearbeitet 08.02.2025 04:15:08

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.

8.8

CVE-2022-24834

  • EPSS 37.95%
  • Veröffentlicht 13.07.2023 15:15:08
  • Zuletzt bearbeitet 21.11.2024 06:51:12

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all...

7.8

CVE-2023-3106

  • EPSS 0.01%
  • Veröffentlicht 12.07.2023 09:15:14
  • Zuletzt bearbeitet 21.11.2024 08:16:28

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of...

8.1

CVE-2023-33170

  • EPSS 0.23%
  • Veröffentlicht 11.07.2023 18:15:15
  • Zuletzt bearbeitet 01.01.2025 02:15:49

ASP.NET and Visual Studio Security Feature Bypass Vulnerability