Fedora Extra Packages for Enterprise Linux 7
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-25584 | | Out of bounds read in parse_module function in bfd/vms-alpha.c | HIGH 7.1 | 0.4 % | ||
| CVE-2023-25585 | | Field `file_table` of `struct module *module` is uninitialized | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-25586 | | Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-25588 | | Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-3603 | | Processing sftp server read may cause null dereference | MEDIUM 6.5 | 0.9 % |