fedoraproject fedora 21 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive.

Debian Debian Linux 7.0 Fedoraproject Fedora 21 Fedoraproject Fedora 20 Fedoraproject Fedora 22 Arj Software Arj Archiver 3.10.22

3.5

CVSSv2

ntpd in ntp prior to 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a craft...

Fedoraproject Fedora 21 Fedoraproject Fedora 22 Fedoraproject Fedora 23 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Ntp Ntp

7.5

CVSSv2

The stringprep_utf8_to_ucs4 function in libin prior to 1.31, as used in jabberd2, allows context-dependent malicious users to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.

Gnu Libidn Opensuse Opensuse 13.2 Opensuse Opensuse 13.1 Fedoraproject Fedora 21 Fedoraproject Fedora 22

7.2

CVSSv2

zarafa-autorespond in Zarafa Collaboration Platform (ZCP) prior to 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-*.

Zarafa Zarafa Collaboration Platform Fedoraproject Fedora 21

7.5

CVSSv2

SQL injection vulnerability in Zend Framework prior to 1.12.9, 2.2.x prior to 2.2.8, and 2.3.x prior to 2.3.3, when using the sqlsrv PHP extension, allows remote malicious users to execute arbitrary SQL commands via a null byte.

Zend Zend Framework Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0 Fedoraproject Fedora 19 Fedoraproject Fedora 20 Fedoraproject Fedora 21

7.2

CVSSv2

Blkid in util-linux prior to 2.26rc-1 allows local users to execute arbitrary code.

Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Fedoraproject Fedora 20 Fedoraproject Fedora 21 Kernel Util-linux

3.5

CVSSv2

The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth prior to 1.12.4 and 1.13.x prior to 1.13.1, when a case-insensitive filesystem is used, allow remote malicious users to obtain sensitive in...

Wesnoth Battle For Wesnoth Wesnoth Battle For Wesnoth 1.13.0 Fedoraproject Fedora 21 Fedoraproject Fedora 22

4

CVSSv2

The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth prior to 1.12.3 and 1.13.x prior to 1.13.1 allow remote malicious users to obtain sensitive information via vectors related to inclusion of...

Wesnoth Battle For Wesnoth Wesnoth Battle For Wesnoth 1.13.0 Fedoraproject Fedora 21 Fedoraproject Fedora 22

4.6

CVSSv2

Integer overflow in the authentication_agent_new_cookie function in PolicyKit (aka polkit) prior to 0.113 allows local users to gain privileges by creating a large number of connections, which triggers the issuance of a duplicate cookie value.

Fedoraproject Fedora 21 Opensuse Opensuse 13.2 Fedoraproject Fedora 22 Opensuse Opensuse 13.1 Polkit Project Polkit

10

CVSSv2

libuv prior to 0.10.34 does not properly drop group privileges, which allows context-dependent malicious users to gain privileges via unspecified vectors.

Fedoraproject Fedora 21 Libuv Project Libuv Nodejs Node.js

Get Started

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook