Fedoraproject: >> Fedora >> 36 Security Vulnerabilities
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
Advancecomp v2.3 contains a segmentation fault.
CVSS Score
5.5
EPSS Score
0.004
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-08-27
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
CVSS Score
3.3
EPSS Score
0.005
Published
2022-08-26
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-08-26
A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvme_ctrl_reset(), data structs will be freed leading to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition or, potentially, executing arbitrary code within the context of the QEMU process on the host.
CVSS Score
8.2
EPSS Score
0.007
Published
2022-08-25
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
CVSS Score
7.5
EPSS Score
0.058
Published
2022-08-25