FC
Product
Fedora Core
77
CVEs
0
On KEV
5.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Fedora Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0109 | 5.6 | Mar 5 | Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to… Affected: core_3.0 |
| CVE-2007-6131 | – | Nov 26 | buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files Affected: f7 |
| CVE-2007-2874 | – | Jul 27 | Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to… Affected: through 0.6.5-3.fc7 |
| CVE-2007-2030 | – | Apr 16 | lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked Affected: core_5.0 |
| CVE-2007-1352 | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… Affected: core_1.0 |
| CVE-2006-6235 | – | Dec 7 | A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP… Affected: core_5.0; core6 |
| CVE-2006-5701 | – | Nov 3 | Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service… Affected: core_5.0 |
| CVE-2006-0745 | – | Mar 21 | X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid,… Affected: core_5.0 |
| CVE-2006-0453 | – | Feb 14 | The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a certain "bad BER sequence" that results in a free of… Affected: 1.0 |
| CVE-2006-0452 | – | Feb 14 | dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via a ModDN operation with a DN… Affected: 1.0 |
| CVE-2006-0451 | – | Feb 14 | Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (memory consumption) via invalid BER packets that… Affected: 1.0 |
| CVE-2005-3626 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted… Affected: core_1.0; core_2.0; core_3.0; core_4.0 |
| CVE-2005-3630 | – | Dec 31 | Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache… Affected: 1.0 |
| CVE-2005-3625 | – | Dec 31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams… Affected: core_1.0; core_2.0; core_3.0; core_4.0 |
| CVE-2005-3624 | – | Dec 31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via… Affected: core_1.0; core_2.0; core_3.0; core_4.0 |
| CVE-2005-1267 | – | Jun 10 | The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of… Affected: core_3.0; core_4.0 |
| CVE-2005-0206 | – | Apr 27 | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2005-0085 | – | Apr 27 | Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not… Affected: core_3.0 |
| CVE-2005-0754 | – | Apr 22 | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code Affected: core_3.0 |
| CVE-2004-1235 | – | Apr 14 | Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2005-0750 | – | Mar 27 | The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2005-0736 | – | Mar 9 | Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events Affected: core_2.0; core_3.0 |
| CVE-2005-0667 | – | Mar 7 | Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing… Affected: core_3.0 |
| CVE-2005-0605 | – | Mar 2 | scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow Affected: core_2.0; core_3.0 |
| CVE-2004-0989 | – | Mar 1 | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is… Affected: core_2.0 |
| CVE-2004-0986 | – | Mar 1 | Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the… Affected: core_3.0 |
| CVE-2004-0960 | – | Feb 9 | FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1… Affected: core_2.0 |
| CVE-2004-0974 | – | Feb 9 | The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files Affected: core_2.0; core_3.0 |
| CVE-2004-0961 | – | Feb 9 | Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret,… Affected: core_2.0 |
| CVE-2005-0156 | – | Feb 7 | Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG… Affected: core_3.0 |
| CVE-2004-0886 | – | Jan 27 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect… Affected: core_2.0 |
| CVE-2004-0930 | – | Jan 27 | The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request… Affected: core_2.0; core_3.0 |
| CVE-2004-0918 | – | Jan 27 | The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via… Affected: core_2.0 |
| CVE-2004-0903 | – | Jan 27 | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows… Affected: core_1.0 |
| CVE-2004-0902 | – | Jan 27 | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of… Affected: core_1.0 |
| CVE-2004-0889 | – | Jan 27 | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute… Affected: core_2.0 |
| CVE-2004-0888 | – | Jan 27 | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service… Affected: core_2.0 |
| CVE-2004-0882 | – | Jan 27 | Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a… Affected: core_2.0; core_3.0 |
| CVE-2004-1184 | – | Jan 21 | The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters Affected: core_2.0; core_3.0 |
| CVE-2004-0883 | – | Jan 10 | Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information… Affected: core_2.0; core_3.0 |
| CVE-2004-1270 | – | Jan 10 | lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file… Affected: core_2.0; core_3.0 |
| CVE-2004-1269 | – | Jan 10 | lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of… Affected: core_2.0; core_3.0 |
| CVE-2004-1268 | – | Jan 10 | lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering… Affected: core_2.0; core_3.0 |
| CVE-2004-1267 | – | Jan 10 | Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file Affected: core_2.0; core_3.0 |
| CVE-2004-1171 | – | Jan 10 | KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for… Affected: core_2.0; core_3.0 |
| CVE-2004-1158 | – | Jan 10 | Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab… Affected: core_2.0; core_3.0 |
| CVE-2004-1154 | – | Jan 10 | Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly… Affected: core_2.0; core_3.0 |
| CVE-2004-1073 | – | Jan 10 | The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by… Affected: core_2.0; core_3.0 |
| CVE-2004-1072 | – | Jan 10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could… Affected: core_2.0; core_3.0 |
| CVE-2004-1071 | – | Jan 10 | The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an… Affected: core_2.0; core_3.0 |