fedoraproject fedora 34 vulnerabilities and exploits

(subscribe to this query)

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f exists to contain a heap buffer overflow via the function sfnt_init_face.

Freetype Freetype Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db exists to contain a segmentation violation via the function FNT_Size_Request.

Freetype Freetype Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

In GNOME libgfbgraph up to and including 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

Gnome Libgfbgraph Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Fetchmail prior to 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.

Fetchmail Fetchmail Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

A flaw was found in CImg in versions before 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

Cimg Cimg Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Pillow prior to 8.1.1 allows malicious users to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.

Python Pillow Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

Buffer overflow vulnerabilities exist in FRRouting up to and including 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis_nb_notifications.c.

Frrouting Frrouting Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

An issue exists in Cacti 1.2.x up to and including 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated malicious users to execute arbitrary SQL commands via the site_id parameter. This can lead to remote code execution.

Cacti Cacti Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook