# Fedora.

Every CVE that names Fedora among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape](https://agentprime.io/advisories/CVE-2026-94422.md)
  `CVE-2026-94422` · CVE record: Fedora Fedora and 2 more · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [PackageKit: dnf5 backend ignores SIMULATE on RepoRemove](https://agentprime.io/advisories/CVE-2026-19816.md)
  `CVE-2026-19816` · CVE record: Fedora Fedora and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [NetworkManager-l2tp: local privilege escalation via ipsec.conf injection](https://agentprime.io/advisories/CVE-2026-19624.md)
  `CVE-2026-19624` · CVE record: Fedora Fedora and 1 more · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: Command injection
- [Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function](https://agentprime.io/advisories/CVE-2023-4235.md)
  `CVE-2023-4235` · CVE record: ofono and 1 more · CVSS 8.1 High · Not analysed yet · Published 17 Apr 2024 · Tags: Memory corruption
- [Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function](https://agentprime.io/advisories/CVE-2023-4234.md)
  `CVE-2023-4234` · CVE record: ofono and 1 more · CVSS 8.1 High · Not analysed yet · Published 17 Apr 2024 · Tags: Memory corruption
- [Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function](https://agentprime.io/advisories/CVE-2023-4233.md)
  `CVE-2023-4233` · CVE record: ofono and 1 more · CVSS 8.1 High · Not analysed yet · Published 17 Apr 2024 · Tags: Memory corruption
- [Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function](https://agentprime.io/advisories/CVE-2023-4232.md)
  `CVE-2023-4232` · CVE record: ofono and 1 more · CVSS 8.1 High · Not analysed yet · Published 17 Apr 2024 · Tags: Memory corruption
- [Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet](https://agentprime.io/advisories/CVE-2023-3966.md)
  `CVE-2023-3966` · CVE record: openvswitch and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2024 · Tags: CWE-248
- [Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu](https://agentprime.io/advisories/CVE-2024-1312.md)
  `CVE-2024-1312` · CVE record: kernel and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Feb 2024 · Tags: Memory corruption
- [Glibc: integer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6780.md)
  `CVE-2023-6780` · CVE record: glibc and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption
- [Glibc: off-by-one heap-based buffer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6779.md)
  `CVE-2023-6779` · CVE record: glibc and 4 more · CVSS 8.2 High · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption
- [Glibc: heap-based buffer overflow in \_\_vsyslog_internal()](https://agentprime.io/advisories/CVE-2023-6246.md)
  `CVE-2023-6246` · CVE record: glibc and 4 more · CVSS 8.4 High · Not analysed yet · Published 31 Jan 2024 · Tags: Memory corruption
- [Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths](https://agentprime.io/advisories/CVE-2023-6258.md)
  `CVE-2023-6258` · CVE record: pkcs11-provider and 1 more · CVSS 8.1 High · Not analysed yet · Published 30 Jan 2024 · Tags: CWE-1300
- [Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-6200.md)
  `CVE-2023-6200` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2024 · Tags: Race condition
- [Sudo: improper handling of ipa_hostname leads to privilege mismanagement](https://agentprime.io/advisories/CVE-2023-7090.md)
  `CVE-2023-7090` · CVE record: sudo and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 23 Dec 2023 · Tags: Privilege escalation
- [W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)](https://agentprime.io/advisories/CVE-2023-4255.md)
  `CVE-2023-4255` · CVE record: w3m and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Memory corruption
- [Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c](https://agentprime.io/advisories/CVE-2023-4256.md)
  `CVE-2023-4256` · CVE record: tcpreplay and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Dec 2023 · Tags: Memory corruption
- [Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp](https://agentprime.io/advisories/CVE-2023-3430.md)
  `CVE-2023-3430` · CVE record: OpenImageIO and 2 more · CVSS 7.5 High · Not analysed yet · Published 18 Dec 2023 · Tags: Memory corruption
- [Kernel: io_uring out of boundary memory access in \_\_io_uaddr_map()](https://agentprime.io/advisories/CVE-2023-6560.md)
  `CVE-2023-6560` · CVE record: kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2023 · Tags: CWE-823
- [Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c](https://agentprime.io/advisories/CVE-2023-5972.md)
  `CVE-2023-5972` · CVE record: kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 23 Nov 2023 · Tags: Memory corruption
- [Kernel: nvme: memory corruption via unprivileged user passthrough](https://agentprime.io/advisories/CVE-2023-6238.md)
  `CVE-2023-6238` · CVE record: kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: Memory corruption
- [Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect](https://agentprime.io/advisories/CVE-2023-6039.md)
  `CVE-2023-6039` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Nov 2023 · Tags: Memory corruption
- [Samba: ad dc password exposure to privileged users and rodcs](https://agentprime.io/advisories/CVE-2023-4154.md)
  `CVE-2023-4154` · CVE record: samba and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Nov 2023 · Tags: Memory corruption
- [Use-after-free in parse_lease_state()](https://agentprime.io/advisories/CVE-2023-1194.md)
  `CVE-2023-1194` · CVE record: kernel and 4 more · CVSS 7.1 High · Not analysed yet · Published 3 Nov 2023 · Tags: Memory corruption
- [Potential buffer overflow in php_cli_server_startup_workers](https://agentprime.io/advisories/CVE-2022-4900.md)
  `CVE-2022-4900` · CVE record: php and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Memory corruption
- [Reachable assertion in avahi_alternative_host_name](https://agentprime.io/advisories/CVE-2023-38473.md)
  `CVE-2023-38473` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in avahi_rdata_parse](https://agentprime.io/advisories/CVE-2023-38472.md)
  `CVE-2023-38472` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in dbus_set_host_name](https://agentprime.io/advisories/CVE-2023-38471.md)
  `CVE-2023-38471` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in avahi_escape_label](https://agentprime.io/advisories/CVE-2023-38470.md)
  `CVE-2023-38470` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Reachable assertion in avahi_dns_packet_append_record](https://agentprime.io/advisories/CVE-2023-38469.md)
  `CVE-2023-38469` · CVE record: avahi avahi and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Denial of service
- [Heap-buffer-overflow in extractimagesection()](https://agentprime.io/advisories/CVE-2023-3164.md)
  `CVE-2023-3164` · CVE record: libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2023 · Tags: Memory corruption
- [Use-after-free in setup_async_work()](https://agentprime.io/advisories/CVE-2023-1193.md)
  `CVE-2023-1193` · CVE record: Kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Use-after-free in smb2_is_status_io_timeout()](https://agentprime.io/advisories/CVE-2023-1192.md)
  `CVE-2023-1192` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: Memory corruption
- [Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access](https://agentprime.io/advisories/CVE-2023-42752.md)
  `CVE-2023-42752` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2023 · Tags: Memory corruption
- [Openvswitch don't match packets on nd_target field](https://agentprime.io/advisories/CVE-2023-5366.md)
  `CVE-2023-5366` · CVE record: openvswitch and 4 more · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2023 · Tags: CWE-345
- [Memory leak on tls connections](https://agentprime.io/advisories/CVE-2022-4132.md)
  `CVE-2022-4132` · CVE record: jss and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [Service monitor mac flow is not rate limited](https://agentprime.io/advisories/CVE-2023-3153.md)
  `CVE-2023-3153` · CVE record: ovn and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [Heap out of bound read in builtin.c](https://agentprime.io/advisories/CVE-2023-4156.md)
  `CVE-2023-4156` · CVE record: gawk and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: Memory corruption
- [Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c](https://agentprime.io/advisories/CVE-2023-5158.md)
  `CVE-2023-5158` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 25 Sept 2023 · Tags: CWE-684
- [Out of bounds read in parse_module function in bfd/vms-alpha.c](https://agentprime.io/advisories/CVE-2023-25584.md)
  `CVE-2023-25584` · CVE record: binutils and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Field \`file_table\` of \`struct module \*module\` is uninitialized](https://agentprime.io/advisories/CVE-2023-25585.md)
  `CVE-2023-25585` · CVE record: binutils and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Local variable \`ch_type\` in function \`bfd_init_section_decompress_status\` can be uninitialized](https://agentprime.io/advisories/CVE-2023-25586.md)
  `CVE-2023-25586` · CVE record: binutils and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Field \`the_bfd\` of \`asymbol\` is uninitialized in function \`bfd_mach_o_get_synthetic_symtab\`](https://agentprime.io/advisories/CVE-2023-25588.md)
  `CVE-2023-25588` · CVE record: binutils and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Memory corruption
- [Gvariant deserialisation does not match spec for non-normal data](https://agentprime.io/advisories/CVE-2023-32665.md)
  `CVE-2023-32665` · CVE record: glib2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: Denial of service
- [Dma reentrancy issue (incomplete fix for cve-2021-3750)](https://agentprime.io/advisories/CVE-2023-2680.md)
  `CVE-2023-2680` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption
- [Sev-es / sev-snp vmgexit double fetch vulnerability](https://agentprime.io/advisories/CVE-2023-4155.md)
  `CVE-2023-4155` · CVE record: kernel and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Race condition
- [Triggerable assertion due to race condition in hot-unplug](https://agentprime.io/advisories/CVE-2023-3301.md)
  `CVE-2023-3301` · CVE record: qemu and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service
- [Use after free race between mbind() and vma-locked page fault](https://agentprime.io/advisories/CVE-2023-4611.md)
  `CVE-2023-4611` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 29 Aug 2023 · Tags: Memory corruption
- [Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c](https://agentprime.io/advisories/CVE-2023-4569.md)
  `CVE-2023-4569` · CVE record: Kernel and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 28 Aug 2023 · Tags: CWE-402
- [Memory leak in btrfs_get_dev_args_from_path()](https://agentprime.io/advisories/CVE-2023-4394.md)
  `CVE-2023-4394` · CVE record: Kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 17 Aug 2023 · Tags: Denial of service
- [Kernel: btrfs: double free in btrfs_get_root_ref()](https://agentprime.io/advisories/CVE-2023-4389.md)
  `CVE-2023-4389` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption
- [Out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4135.md)
  `CVE-2023-4135` · CVE record: qemu-kvm and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Memory corruption
- [Heap buffer overflow in virtio_crypto_sym_op_helper()](https://agentprime.io/advisories/CVE-2023-3180.md)
  `CVE-2023-3180` · CVE record: qemu and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [Tree connection null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32248.md)
  `CVE-2023-32248` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32257.md)
  `CVE-2023-32257` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition
- [Session null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32252.md)
  `CVE-2023-32252` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption
- [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32258.md)
  `CVE-2023-32258` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition
- [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md)
  `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281
- [Session setup memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32247.md)
  `CVE-2023-32247` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Denial of service
- [Inifinite loop in babld message parsing may cause dos](https://agentprime.io/advisories/CVE-2023-3748.md)
  `CVE-2023-3748` · CVE record: frr and 3 more · CVSS 3.5 Low · Not analysed yet · Published 24 Jul 2023 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/fedora.md?cursor=WyIyMDIzLTA3LTI0VDE1OjE5OjIwLjUxMTAwMFoiLCJDVkUtMjAyMy0zNzQ4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fedora>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fedora/>. Everything for agents: <https://agentprime.io/llms.txt>.