FE
Vendor
Fedora
24
CVEs
0
On KEV
1
New 30D
Products
FE8.8
Fedora
Fedora
8 CVEs0 on KEV1 new
DS–
Directory Server
Fedora
3 CVEs0 on KEV0 new
EP7.5
Extra Packages for Enterprise Linux
Fedora
3 CVEs0 on KEV0 new
F37.5
Fedora 37
Fedora
3 CVEs0 on KEV0 new
F37.5
Fedora 38
Fedora
3 CVEs0 on KEV0 new
PC–
Pacemaker Configuration System
Fedora
2 CVEs0 on KEV0 new
EP7.8
Extra Packages for Enterprise Linux (EPEL)
Fedora
1 CVEs0 on KEV0 new
NE–
Newsx
Fedora
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94422 | FE Fedora Fedora | 8.8 | Oct 2 | xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape |
| CVE-2026-19816 | FE Fedora Fedora | 7.1 | Sep 14 | PackageKit: dnf5 backend ignores SIMULATE on RepoRemove |
| CVE-2026-19624 | FE Fedora Fedora | 7.8 | Sep 14 | NetworkManager-l2tp: local privilege escalation via ipsec.conf injection |
| CVE-2023-6780 | FE Fedora Fedora | 5.3 | Jan 31 | Glibc: integer overflow in __vsyslog_internal() |
| CVE-2023-6779 | FE Fedora Fedora | 7.5 | Jan 31 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() |
| CVE-2023-6246 | FE Fedora Fedora | 7.8 | Jan 31 | Glibc: heap-based buffer overflow in __vsyslog_internal() |
| CVE-2023-32611 | EP Extra Packages for Enterprise Linux Fedora | 5.5 | Sep 14 | G_variant_byteswap() can take a long time with some non-normal inputs |
| CVE-2023-29499 | F3 Fedora 38 Fedora | 7.5 | Sep 14 | Gvariant offset table entry size is not checked in is_normal() |
| CVE-2023-32665 | EP Extra Packages for Enterprise Linux Fedora | 5.5 | Sep 14 | Gvariant deserialisation does not match spec for non-normal data |
| CVE-2023-3338 | FE Fedora Fedora | 6.5 | Jun 30 | Crash due to a null pointer dereference in the dn_nsp_send function |
| CVE-2015-3983 | PC Pacemaker Configuration System Fedora | – | May 14 | The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially… |
| CVE-2015-1848 | PC Pacemaker Configuration System Fedora | – | May 14 | The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie… |
| CVE-2008-2929 | DS Directory Server Fedora | – | Aug 29 | Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in… |
| CVE-2008-3283 | DS Directory Server Fedora | – | Aug 29 | Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a… |
| CVE-2008-2930 | DS Directory Server Fedora | – | Aug 29 | Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and… |
| CVE-2008-3252 | NE Newsx Fedora | – | Jul 21 | Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large… |