Product by Fedora
Extra Packages For Enterprise Linux
20 known vulnerabilities in Extra Packages For Enterprise Linux (Fedora), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-3354 | Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service | 7.5 | |
| Critical | CVE-2023-6395 | Mock: privilege escalation for users that can access mock configuration | 6.7 | |
| High | CVE-2023-3430 | Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp | 7.5 | |
| High | CVE-2023-29499 | Gvariant offset table entry size is not checked in is_normal() | 5.5 | |
| Medium | CVE-2022-4132 | Memory leak on tls connections | 5.9 | |
| Medium | CVE-2023-3180 | Heap buffer overflow in virtio_crypto_sym_op_helper() | 6.0 | |
| High | CVE-2023-34432 | Heap-buffer-overflow in src/formats_i.c | 7.8 | |
| High | CVE-2021-4435 | Yarn: untrusted search path | 7.7 | |
| High | CVE-2023-34318 | Heap-buffer-overflow in src/hcom.c | 7.8 | |
| High | CVE-2023-2680 | Dma reentrancy issue (incomplete fix for cve-2021-3750) | 7.5 | |
| Medium | CVE-2023-4135 | Out-of-bounds read information disclosure vulnerability | 6.0 | |
| Medium | CVE-2023-32665 | Gvariant deserialisation does not match spec for non-normal data | 5.5 | |
| Medium | CVE-2023-32611 | G_variant_byteswap() can take a long time with some non-normal inputs | 5.5 | |
| Medium | CVE-2023-32627 | Floating point exception in src/voc.c | 6.2 | |
| Medium | CVE-2023-4256 | Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c | 5.5 | |
| Medium | CVE-2023-4255 | W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) | 5.5 | |
| Medium | CVE-2023-26590 | Floating point exception in src/aiff.c | 6.2 | |
| Medium | CVE-2023-3301 | Triggerable assertion due to race condition in hot-unplug | 5.6 | |
| Medium | CVE-2023-38253 | W3m: out of bounds read in growbuf_to_str() at w3m/indep.c | 4.7 | |
| High | CVE-2023-1386 | Qemu: 9pfs: suid/sgid bits not dropped on file write | 3.3 |