Fedora Extra Packages for Enterprise Linux
20 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-4435 | | Yarn: untrusted search path | HIGH 7.8 | 0.3 % | ||
| CVE-2023-6395 | | Mock: privilege escalation for users that can access mock configuration | CRITICAL 9.8 | 1.6 % | ||
| CVE-2023-4255 | | W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-4256 | | Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-3430 | | Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp | HIGH 7.5 | 1.2 % | ||
| CVE-2022-4132 | | Memory leak on tls connections | MEDIUM 5.9 | 0.7 % | ||
| CVE-2023-32611 | | G_variant_byteswap() can take a long time with some non-normal inputs | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-29499 | | Gvariant offset table entry size is not checked in is_normal() | HIGH 7.5 | 0.8 % | ||
| CVE-2023-32665 | | Gvariant deserialisation does not match spec for non-normal data | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-2680 | | Dma reentrancy issue (incomplete fix for cve-2021-3750) | HIGH 8.2 | 0.2 % | ||
| CVE-2023-3301 | | Triggerable assertion due to race condition in hot-unplug | MEDIUM 5.6 | 0.3 % | ||
| CVE-2023-4135 | | Out-of-bounds read information disclosure vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-3180 | | Heap buffer overflow in virtio_crypto_sym_op_helper() | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-1386 | | Qemu: 9pfs: suid/sgid bits not dropped on file write | HIGH 7.8 | 0.2 % | ||
| CVE-2023-38253 | | W3m: out of bounds read in growbuf_to_str() at w3m/indep.c | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-3354 | | Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service | HIGH 7.5 | 1.6 % | ||
| CVE-2023-34432 | | Heap-buffer-overflow in src/formats_i.c | HIGH 7.8 | 0.4 % | ||
| CVE-2023-34318 | | Heap-buffer-overflow in src/hcom.c | HIGH 7.8 | 0.3 % | ||
| CVE-2023-32627 | | Floating point exception in src/voc.c | MEDIUM 6.2 | 0.3 % | ||
| CVE-2023-26590 | | Floating point exception in src/aiff.c | MEDIUM 6.2 | 0.2 % |