fedoraproject fedora 34 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

6.8

CVSSv2

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

4.3

CVSSv2

Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page....

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 341 Github repository available

4.3

CVSSv2

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

6.8

CVSSv2

Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

5.8

CVSSv2

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

6.8

CVSSv2

Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Google Chrome Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

5

CVSSv2

Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large....

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

7.5

CVSSv2

An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py....

Saltstack Salt Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

5.8

CVSSv2

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity....

Cimg Cimg Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook