Fedoraproject: >> Fedora >> 35 Security Vulnerabilities
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVSS Score
7.8
EPSS Score
0.0
Published
2022-08-30
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-08-30
A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-08-29
A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
CVSS Score
7.8
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 contains a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29