Fedoraproject: >> Fedora >> 37 Security Vulnerabilities
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVSS Score
7.8
EPSS Score
0.0
Published
2022-08-28
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-27
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.
CVSS Score
4.4
EPSS Score
0.0
Published
2022-08-26
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.
CVSS Score
3.3
EPSS Score
0.0
Published
2022-08-26
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-26
A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
CVSS Score
6.5
EPSS Score
0.002
Published
2022-08-25
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.
CVSS Score
6.3
EPSS Score
0.0
Published
2022-08-25