Vulnerabilidades em Fedora

87 resultados
Análise Vexday

O histórico de vulnerabilidades catalogadas para o Fedora compreende 87 CVEs, com taxa de exploração ativa abaixo da média geral do catálogo, sem nenhum registro no CISA KEV. Apesar disso, o escore EPSS de 0,9446 associado à CVE-2018-1111 indica probabilidade muito elevada de exploração para essa vulnerabilidade específica, o que merece atenção prioritária mesmo na ausência de confirmação formal de exploração ativa. O tipo de falha mais frequente é CWE-416 (use-after-free), categoria que historicamente favorece execução de código arbitrário e escalonamento de privilégios. A existência de pelo menos uma PoC pública reforça a necessidade de manter os sistemas atualizados, ainda que o volume de novas vulnerabilidades nos últimos 90 dias esteja zerado.

CVE-2018-1111HIGHDHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager iEPSS 98.0%CVE-2023-1183MEDIUMArbitrary file writeEPSS 64.6%CVE-2023-3338MEDIUMCrash due to a null pointer dereference in the dn_nsp_send functionEPSS 8.0%CVE-2023-6246HIGHGlibc: heap-based buffer overflow in __vsyslog_internal()EPSS 4.8%CVE-2023-32248HIGHTree connection null pointer dereference denial-of-service vulnerabilityEPSS 4.1%CVE-2023-32252HIGHSession null pointer dereference denial-of-service vulnerabilityEPSS 4.1%CVE-2023-32247HIGHSession setup memory exhaustion denial-of-service vulnerabilityEPSS 3.9%CVE-2023-6779HIGHGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()EPSS 3.2%CVE-2023-32254CRITICALTree connection race condition remote code execution vulnerabilityEPSS 2.9%CVE-2010-3872HIGHHttpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.cEPSS 2.8%CVE-2023-6780MEDIUMGlibc: integer overflow in __vsyslog_internal()EPSS 2.7%CVE-2023-32250CRITICALSession race condition remote code execution vulnerabilityEPSS 2.6%CVE-2023-32258HIGHSession race condition remote code execution vulnerabilityEPSS 2.5%CVE-2023-32257HIGHSession race condition remote code execution vulnerabilityEPSS 2.4%CVE-2023-6200HIGHKernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerabilityEPSS 2.2%CVE-2023-3354HIGHImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceEPSS 1.6%CVE-2023-6395MEDIUMMock: privilege escalation for users that can access mock configurationEPSS 1.6%CVE-2023-3269HIGHDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalEPSS 1.3%CVE-2023-3430HIGHOpenimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppEPSS 1.2%CVE-2023-3618MEDIUMSegmentation fault in fax3encode in libtiff/tif_fax3.cEPSS 1.2%