Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

fedoraproject extra packages for enterprise linux 9.0 vulnerabilities and exploits

(subscribe to this query)

5.5
CVE-2022-3213
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service....
Imagemagick ImagemagickFedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 35Fedoraproject Extra Packages For Enterprise Linux 9.0Fedoraproject Fedora 36Fedoraproject Fedora 37
3.2
CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service....
Qemu Qemu 6.1.50Fedoraproject Fedora 33Fedoraproject Extra Packages For Enterprise Linux 7.0Fedoraproject Fedora 37Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux 8.0Redhat Openstack Platform 13.0Redhat Openstack Platform 10.0Redhat Enterprise Linux 9.0
7.8
CVSSv3
CVE-2022-0546
A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution....
Blender Blender 2.93.8Blender Blender 3.0Fedoraproject Fedora 34Fedoraproject Extra Packages For Enterprise Linux 7.0Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
6.1
CVSSv3
CVE-2022-0571
Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2....
Phoronix-media Phoronix Test SuiteFedoraproject Fedora 34Fedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 35Fedoraproject Extra Packages For Enterprise Linux 9.0Fedoraproject Fedora 36Fedoraproject Extra Packages For Enterprise Linux 7.0
9.1
CVSSv3
CVE-2021-45079
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication....
Strongswan StrongswanDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 34Fedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 35Fedoraproject Extra Packages For Enterprise Linux 9.0Fedoraproject Extra Packages For Enterprise Linux 7.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 21.10
5.5
CVSSv3
CVE-2021-46142
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax....
Uriparser Project UriparserFedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Opensuse Factory -Opensuse Backports Sle-15Opensuse Leap 15.3
5.5
CVSSv3
CVE-2021-46141
An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner....
Uriparser Project UriparserFedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Opensuse Factory -Opensuse Backports Sle-15Opensuse Leap 15.3
8.8
CVSSv3
CVE-2021-21897
A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability....
Ribbonsoft Dxflib 3.17.0Fedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Extra Packages For Enterprise Linux 7.0Fedoraproject Fedora 37Debian Debian Linux 9.0
8.8
CVSSv3
CVE-2021-38714
In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA() function in src/ssg/ssgLoadTGA.cxx file....
Plib Project PlibDebian Debian Linux 9.0Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Extra Packages For Enterprise Linux 7.0Fedoraproject Fedora 37
7.4
CVSSv3
CVE-2021-20247
A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the...
Mbsync Project MbsyncDebian Debian Linux 9.0Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Extra Packages For Enterprise Linux 8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
elevation of privilegeCVE-2022-42331CVE-2023-24709CVE-2023-27569open redirectinjectionCVE-2023-27087
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook