Advisories · Technology
Fedora Extra Packages for Enterprise Linux.
Every CVE that names Fedora Extra Packages for Enterprise Linux among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)
- w3m
- Fedora
- Memory corruption
- CVSS 5.5 Medium
Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c
- tcpreplay
- Fedora Extra Packages for Enterprise Linux
- Memory corruption
- CVSS 7.5 High
Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp
- OpenImageIO
- Fedora Extra Packages for Enterprise Linux
- Memory corruption
- CVSS 5.9 Medium
Memory leak on tls connections
- jss
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 5.5 Medium
G_variant_byteswap() can take a long time with some non-normal inputs
- glib2
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 5.5 Medium
Gvariant offset table entry size is not checked in is_normal()
- glib2
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 5.5 Medium
Gvariant deserialisation does not match spec for non-normal data
- glib2
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 7.5 High
Dma reentrancy issue (incomplete fix for cve-2021-3750)
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.6 Medium
Triggerable assertion due to race condition in hot-unplug
- qemu
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 6.0 Medium
Out-of-bounds read information disclosure vulnerability
- qemu-kvm
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.0 Medium
Heap buffer overflow in virtio_crypto_sym_op_helper()
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 3.3 Low
Qemu: 9pfs: suid/sgid bits not dropped on file write
- qemu
- Red Hat Enterprise Linux 6
- CWE-281
- CVSS 4.7 Medium
W3m: out of bounds read in growbuf_to_str() at w3m/indep.c
- w3m
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.5 High
Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.8 High
Heap-buffer-overflow in src/formats_i.c
- sox
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.8 High
Heap-buffer-overflow in src/hcom.c
- sox
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.2 Medium
Floating point exception in src/voc.c
- sox
- Red Hat Enterprise Linux 6
- CWE-1077
- CVSS 6.2 Medium
Floating point exception in src/aiff.c
- sox
- Red Hat Enterprise Linux 6
- CWE-1077