Fedora Fedora 37
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-25584 | | Out of bounds read in parse_module function in bfd/vms-alpha.c | HIGH 7.1 | 0.4 % | ||
| CVE-2023-25585 | | Field `file_table` of `struct module *module` is uninitialized | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-25586 | | Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-25588 | | Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-32611 | | G_variant_byteswap() can take a long time with some non-normal inputs | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-29499 | | Gvariant offset table entry size is not checked in is_normal() | HIGH 7.5 | 0.8 % | ||
| CVE-2023-32665 | | Gvariant deserialisation does not match spec for non-normal data | MEDIUM 5.5 | 0.4 % |