FC
Product
Fedora Core
77
CVEs
0
On KEV
5.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Fedora Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1070 | – | Jan 10 | The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to… Affected: core_2.0; core_3.0 |
| CVE-2004-1067 | – | Jan 10 | Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code… Affected: core_2.0; core_3.0 |
| CVE-2004-1015 | – | Jan 10 | Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different… Affected: core_2.0; core_3.0 |
| CVE-2004-1013 | – | Jan 10 | The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1)… Affected: core_2.0; core_3.0 |
| CVE-2004-1012 | – | Jan 10 | The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that… Affected: core_2.0; core_3.0 |
| CVE-2004-1011 | – | Jan 10 | Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY… Affected: core_2.0; core_3.0 |
| CVE-2004-0949 | – | Jan 10 | The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could… Affected: core_2.0; core_3.0 |
| CVE-2004-0914 | – | Jan 10 | Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3)… Affected: core_2.0; core_3.0 |
| CVE-2004-0802 | – | Dec 31 | Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2004-0904 | – | Dec 31 | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute… Affected: core_1.0 |
| CVE-2004-0817 | – | Dec 31 | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2004-0803 | – | Dec 23 | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to… Affected: core_2.0 |
| CVE-2004-1335 | – | Dec 15 | Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2004-1333 | – | Dec 15 | Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2004-0619 | – | Dec 6 | Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary… Affected: core_1.0 |
| CVE-2004-0415 | – | Nov 23 | Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory Affected: core_1.0 |
| CVE-2004-1613 | – | Oct 18 | Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3)… Affected: core_1.0; core_2.0 |
| CVE-2005-0373 | – | Oct 7 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows… Affected: core_1.0 |
| CVE-2004-0827 | – | Sep 16 | Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and… Affected: core_1.0; core_2.0; core_3.0 |
| CVE-2004-0905 | – | Sep 14 | Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute… Affected: core_1.0 |
| CVE-2004-0235 | – | Aug 18 | Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) Affected: core_1.0 |
| CVE-2004-0234 | – | Aug 18 | Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local… Affected: core_1.0 |
| CVE-2004-0460 | – | Aug 6 | Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and… Affected: core_2.0 |
| CVE-2004-0587 | – | Aug 6 | Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service Affected: core_1.0 |
| CVE-2004-0557 | – | Aug 6 | Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain… Affected: core_1.0; core_2.0 |
| CVE-2004-0461 | – | Aug 6 | The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf… Affected: core_2.0 |
| CVE-2004-0595 | – | Jul 27 | The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows… Affected: core_1.0; core_2.0 |