Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,842

Export CSV
CVE-2019-12387

python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

CVSS 3.1 · 6.1 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Fedoraproject Oracle and 2 more
Products
Ubuntu Linux Fedora Solaris and 5 more
CVE-2024-1312

Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu

A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot function. This issue could allow a local user to crash the system.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Redhat
Products
Fedora Linux Kernel Enterprise Linux
CVE-2023-6238

Kernel: nvme: memory corruption via unprivileged user passthrough

A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Redhat
Products
Fedora Linux Kernel Enterprise Linux
CVE-2023-5972

Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Redhat
Products
Fedora Linux Kernel Enterprise Linux
CVE-2023-4156

Heap out of bound read in builtin.c

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnu Redhat
Products
Fedora Gawk Enterprise Linux
CVE-2023-4135

Out-of-bounds read information disclosure vulnerability

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Qemu Redhat
Products
Fedora Qemu Advanced Virtualization and 1 more
CVE-2023-44271

python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument

An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Pillow Ansible Automation Platform and 1 more
CVE-2023-43115

Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

CVSS 3.1 · 8.8 High EPSS 6.4% KEV · Not listed
Vendors
Artifex Fedoraproject Redhat
Products
Ghostscript Fedora Enterprise Linux and 1 more
CVE-2023-41915

pmix: race condition allows attackers to obtain ownership of arbitrary files

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.

CVSS 3.1 · 8.1 High EPSS 1.2% KEV · Not listed
Vendors
Debian Fedoraproject Openpmix and 1 more
Products
Debian Linux Fedora Openpmix and 1 more
CVE-2023-41909

frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c

An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes, leading to a NULL pointer dereference.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Debian Fedoraproject Frrouting and 1 more
Products
Debian Linux Fedora Frrouting and 1 more
CVE-2023-41359

frr: out of bounds read in bgp_attr_aigp_valid

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Fedoraproject Frrouting Redhat
Products
Fedora Frrouting Enterprise Linux
CVE-2023-3180

Heap buffer overflow in virtio_crypto_sym_op_helper()

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Qemu and 1 more
Products
Debian Linux Fedora Qemu and 2 more
CVE-2023-38802

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Frrouting and 2 more
Products
Debian Linux Fedora Frrouting and 6 more
CVE-2023-38633

librsvg: Arbitrary file read when xinclude href has special characters

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

CVSS 3.1 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Gnome and 1 more
Products
Debian Linux Fedora Librsvg and 2 more