Fedoraproject: >> Fedora >> 37 Security Vulnerabilities
Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.
CVSS Score
7.5
EPSS Score
0.009
Published
2022-09-01
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
CVSS Score
6.5
EPSS Score
0.004
Published
2022-09-01
In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
CVSS Score
5.5
EPSS Score
0.001
Published
2022-09-01
A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
CVSS Score
7.0
EPSS Score
0.0
Published
2022-08-31
Use After Free in GitHub repository vim/vim prior to 9.0.0322.
CVSS Score
7.8
EPSS Score
0.0
Published
2022-08-30
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-08-30
Advancecomp v2.3 was discovered to contain a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 contains a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29