FE
Vendor
Fedora
86
CVEs
0
On KEV
1
New 30D
Products
FE9.8
Fedora
Fedora
57 CVEs0 on KEV1 new
EP9.8
Extra Packages for Enterprise Linux
Fedora
13 CVEs0 on KEV0 new
DS–
Directory Server
Fedora
3 CVEs0 on KEV0 new
DN8.8
dnf5daemon-server
Fedora
3 CVEs0 on KEV0 new
F37.5
Fedora 37
Fedora
3 CVEs0 on KEV0 new
F37.5
Fedora 38
Fedora
3 CVEs0 on KEV0 new
PC–
Pacemaker Configuration System
Fedora
2 CVEs0 on KEV0 new
EP7.8
Extra Packages for Enterprise Linux (EPEL)
Fedora
1 CVEs0 on KEV0 new
NE–
Newsx
Fedora
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94422 | FE Fedora Fedora | 8.8 | Oct 2 | xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape |
| CVE-2026-19816 | FE Fedora Fedora | 7.1 | Sep 14 | PackageKit: dnf5 backend ignores SIMULATE on RepoRemove |
| CVE-2026-19624 | EP Extra Packages for Enterprise Linux (EPEL) Fedora | 7.8 | Sep 14 | NetworkManager-l2tp: local privilege escalation via ipsec.conf injection |
| CVE-2024-2746 | DN dnf5daemon-server Fedora | 8.8 | May 8 | Incomplete fix for CVE-2024-1929 |
| CVE-2024-1929 | DN dnf5daemon-server Fedora | 8.4 | May 8 | Local Root Exploit via Configuration Dictionary |
| CVE-2024-1930 | DN dnf5daemon-server Fedora | 6.5 | May 8 | No Limit on Number of Open Sessions / Bad Session Close Behaviour |
| CVE-2023-4235 | FE Fedora Fedora | 8.1 | Apr 17 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function |
| CVE-2023-4234 | FE Fedora Fedora | 8.1 | Apr 17 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function |
| CVE-2023-4233 | FE Fedora Fedora | 8.1 | Apr 17 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function |
| CVE-2023-4232 | FE Fedora Fedora | 8.1 | Apr 17 | Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function |
| CVE-2023-3966 | FE Fedora Fedora | 7.5 | Feb 22 | Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet |
| CVE-2024-1312 | FE Fedora Fedora | 4.7 | Feb 8 | Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu |
| CVE-2023-6780 | FE Fedora Fedora | 5.3 | Jan 31 | Glibc: integer overflow in __vsyslog_internal() |
| CVE-2023-6779 | FE Fedora Fedora | 7.5 | Jan 31 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() |
| CVE-2023-6246 | FE Fedora Fedora | 7.8 | Jan 31 | Glibc: heap-based buffer overflow in __vsyslog_internal() |
| CVE-2023-6258 | FE Fedora Fedora | 8.1 | Jan 30 | Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths |
| CVE-2023-6200 | FE Fedora Fedora | 7.5 | Jan 28 | Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability |
| CVE-2023-6395 | EP Extra Packages for Enterprise Linux Fedora | 9.8 | Jan 16 | Mock: privilege escalation for users that can access mock configuration |
| CVE-2023-4255 | FE Fedora Fedora | 5.5 | Dec 21 | W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) |
| CVE-2023-4256 | FE Fedora Fedora | 5.5 | Dec 21 | Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c |
| CVE-2023-3430 | EP Extra Packages for Enterprise Linux Fedora | 7.5 | Dec 18 | Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp |
| CVE-2023-6560 | FE Fedora Fedora | 5.5 | Dec 8 | Kernel: io_uring out of boundary memory access in __io_uaddr_map() |
| CVE-2023-5972 | FE Fedora Fedora | 7.8 | Nov 23 | Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c |
| CVE-2023-6238 | FE Fedora Fedora | 6.7 | Nov 21 | Kernel: nvme: memory corruption via unprivileged user passthrough |
| CVE-2023-4154 | FE Fedora Fedora | 6.5 | Nov 7 | Samba: ad dc password exposure to privileged users and rodcs |
| CVE-2023-1194 | FE Fedora Fedora | 8.1 | Nov 3 | Use-after-free in parse_lease_state() |
| CVE-2022-4900 | FE Fedora Fedora | 5.5 | Nov 2 | Potential buffer overflow in php_cli_server_startup_workers |
| CVE-2023-38473 | FE Fedora Fedora | 5.5 | Nov 2 | Reachable assertion in avahi_alternative_host_name |
| CVE-2023-38472 | FE Fedora Fedora | 5.5 | Nov 2 | Reachable assertion in avahi_rdata_parse |
| CVE-2023-38471 | FE Fedora Fedora | 5.5 | Nov 2 | Reachable assertion in dbus_set_host_name |
| CVE-2023-38470 | FE Fedora Fedora | 5.5 | Nov 2 | Reachable assertion in avahi_escape_label |
| CVE-2023-38469 | FE Fedora Fedora | 5.5 | Nov 2 | Reachable assertion in avahi_dns_packet_append_record |
| CVE-2023-3164 | FE Fedora Fedora | 5.5 | Nov 2 | Heap-buffer-overflow in extractimagesection() |
| CVE-2023-1193 | FE Fedora Fedora | 6.5 | Nov 1 | Use-after-free in setup_async_work() |
| CVE-2023-1192 | FE Fedora Fedora | 6.5 | Nov 1 | Use-after-free in smb2_is_status_io_timeout() |
| CVE-2023-5349 | FE Fedora Fedora | 3.3 | Oct 30 | Draw while calling getdrawinfo() |
| CVE-2023-5366 | FE Fedora Fedora | 5.5 | Oct 6 | Openvswitch don't match packets on nd_target field |
| CVE-2022-4132 | FE Fedora Fedora | 5.9 | Oct 4 | Memory leak on tls connections |
| CVE-2023-3153 | FE Fedora Fedora | 5.3 | Oct 4 | Service monitor mac flow is not rate limited |
| CVE-2023-4156 | FE Fedora Fedora | 7.1 | Sep 25 | Heap out of bound read in builtin.c |
| CVE-2023-32611 | F3 Fedora 38 Fedora | 5.5 | Sep 14 | G_variant_byteswap() can take a long time with some non-normal inputs |
| CVE-2023-29499 | F3 Fedora 38 Fedora | 7.5 | Sep 14 | Gvariant offset table entry size is not checked in is_normal() |
| CVE-2023-32665 | F3 Fedora 38 Fedora | 5.5 | Sep 14 | Gvariant deserialisation does not match spec for non-normal data |
| CVE-2023-4155 | FE Fedora Fedora | 5.6 | Sep 13 | Sev-es / sev-snp vmgexit double fetch vulnerability |
| CVE-2023-3301 | FE Fedora Fedora | 5.6 | Sep 13 | Triggerable assertion due to race condition in hot-unplug |
| CVE-2023-4135 | FE Fedora Fedora | 6.5 | Aug 4 | Out-of-bounds read information disclosure vulnerability |
| CVE-2023-3180 | FE Fedora Fedora | 6.5 | Aug 3 | Heap buffer overflow in virtio_crypto_sym_op_helper() |
| CVE-2023-1386 | FE Fedora Fedora | 7.8 | Jul 24 | Qemu: 9pfs: suid/sgid bits not dropped on file write |
| CVE-2023-0160 | FE Fedora Fedora | 5.5 | Jul 18 | Possibility of deadlock in libbpf function sock_hash_delete_elem |
| CVE-2023-38253 | FE Fedora Fedora | 5.5 | Jul 14 | W3m: out of bounds read in growbuf_to_str() at w3m/indep.c |
| CVE-2023-3618 | FE Fedora Fedora | 6.5 | Jul 12 | Segmentation fault in fax3encode in libtiff/tif_fax3.c |
| CVE-2023-3354 | FE Fedora Fedora | 7.5 | Jul 11 | Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service |
| CVE-2023-1672 | FE Fedora Fedora | 5.3 | Jul 11 | Race condition exists in the key generation and rotation functionality |
| CVE-2023-3269 | FE Fedora Fedora | 7.8 | Jul 11 | Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal |
| CVE-2023-34432 | EP Extra Packages for Enterprise Linux Fedora | 7.8 | Jul 10 | Heap-buffer-overflow in src/formats_i.c |
| CVE-2023-34318 | EP Extra Packages for Enterprise Linux Fedora | 7.8 | Jul 10 | Heap-buffer-overflow in src/hcom.c |
| CVE-2023-32627 | FE Fedora Fedora | 5.5 | Jul 10 | Floating point exception in src/voc.c |
| CVE-2023-26590 | EP Extra Packages for Enterprise Linux Fedora | 5.5 | Jul 10 | Floating point exception in src/aiff.c |
| CVE-2023-1183 | FE Fedora Fedora | 5.5 | Jul 10 | Arbitrary file write |
| CVE-2023-2908 | FE Fedora Fedora | 5.5 | Jun 30 | Libtiff: null pointer dereference in tif_dir.c |