Product by Fedora

    Extra Packages For Enterprise Linux

    20 known vulnerabilities in Extra Packages For Enterprise Linux (Fedora), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Extra Packages For Enterprise Linux (Fedora)
    HighCVE-2023-3354

    Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

    also in 12 other products

    7.5
    CriticalCVE-2023-6395

    Mock: privilege escalation for users that can access mock configuration

    also in 5 other products

    6.7
    HighCVE-2023-3430

    Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp

    also in 2 other products

    7.5
    HighCVE-2023-29499

    Gvariant offset table entry size is not checked in is_normal()

    also in 8 other products

    5.5
    MediumCVE-2022-4132

    Memory leak on tls connections

    also in 9 other products

    5.9
    MediumCVE-2023-3180

    Heap buffer overflow in virtio_crypto_sym_op_helper()

    also in 10 other products

    6.0
    HighCVE-2023-34432

    Heap-buffer-overflow in src/formats_i.c

    also in 7 other products

    7.8
    HighCVE-2021-4435

    Yarn: untrusted search path

    also in 2 other products

    7.7
    HighCVE-2023-34318

    Heap-buffer-overflow in src/hcom.c

    also in 7 other products

    7.8
    HighCVE-2023-2680

    Dma reentrancy issue (incomplete fix for cve-2021-3750)

    also in 9 other products

    7.5
    MediumCVE-2023-4135

    Out-of-bounds read information disclosure vulnerability

    also in 8 other products

    6.0
    MediumCVE-2023-32665

    Gvariant deserialisation does not match spec for non-normal data

    also in 9 other products

    5.5
    MediumCVE-2023-32611

    G_variant_byteswap() can take a long time with some non-normal inputs

    also in 8 other products

    5.5
    MediumCVE-2023-32627

    Floating point exception in src/voc.c

    also in 7 other products

    6.2
    MediumCVE-2023-4256

    Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c

    also in 4 other products

    5.5
    MediumCVE-2023-4255

    W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)

    also in 4 other products

    5.5
    MediumCVE-2023-26590

    Floating point exception in src/aiff.c

    also in 7 other products

    6.2
    MediumCVE-2023-3301

    Triggerable assertion due to race condition in hot-unplug

    also in 9 other products

    5.6
    MediumCVE-2023-38253

    W3m: out of bounds read in growbuf_to_str() at w3m/indep.c

    also in 6 other products

    4.7
    HighCVE-2023-1386

    Qemu: 9pfs: suid/sgid bits not dropped on file write

    also in 8 other products

    3.3

    All products by Fedora