# Fedora. Every CVE that names Fedora among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Out-of-bounds read when setting hmac data](https://agentprime.io/advisories/CVE-2023-2860.md) `CVE-2023-2860` · CVE record: kernel and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c](https://agentprime.io/advisories/CVE-2023-3863.md) `CVE-2023-3863` · CVE record: Kernel and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Processing sftp server read may cause null dereference](https://agentprime.io/advisories/CVE-2023-3603.md) `CVE-2023-3603` · CVE record: libssh and 4 more · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2023 · Tags: Memory corruption - [Possibility of deadlock in libbpf function sock_hash_delete_elem](https://agentprime.io/advisories/CVE-2023-0160.md) `CVE-2023-0160` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Denial of service - [W3m: out of bounds read in growbuf_to_str() at w3m/indep.c](https://agentprime.io/advisories/CVE-2023-38253.md) `CVE-2023-38253` · CVE record: w3m and 3 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [Segmentation fault in fax3encode in libtiff/tif_fax3.c](https://agentprime.io/advisories/CVE-2023-3618.md) `CVE-2023-3618` · CVE record: libtiff and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md) `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Race condition exists in the key generation and rotation functionality](https://agentprime.io/advisories/CVE-2023-1672.md) `CVE-2023-1672` · CVE record: tang and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: Race condition - [Distros-\[dirtyvma\] privilege escalation via non-rcu-protected vma traversal](https://agentprime.io/advisories/CVE-2023-3269.md) `CVE-2023-3269` · CVE record: kernel and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Heap-buffer-overflow in src/formats_i.c](https://agentprime.io/advisories/CVE-2023-34432.md) `CVE-2023-34432` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption - [Heap-buffer-overflow in src/hcom.c](https://agentprime.io/advisories/CVE-2023-34318.md) `CVE-2023-34318` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption - [Floating point exception in src/voc.c](https://agentprime.io/advisories/CVE-2023-32627.md) `CVE-2023-32627` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077 - [Floating point exception in src/aiff.c](https://agentprime.io/advisories/CVE-2023-26590.md) `CVE-2023-26590` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077 - [Tree connection race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32254.md) `CVE-2023-32254` · CVE record: kernel and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32250.md) `CVE-2023-32250` · CVE record: kernel and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Arbitrary file write](https://agentprime.io/advisories/CVE-2023-1183.md) `CVE-2023-1183` · CVE record: libreoffice and 4 more · CVSS 5.0 Medium · EPSS 0.65 · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-20 - [Crash due to a null pointer dereference in the dn_nsp_send function](https://agentprime.io/advisories/CVE-2023-3338.md) `CVE-2023-3338` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dir.c](https://agentprime.io/advisories/CVE-2023-2908.md) `CVE-2023-2908` · CVE record: Libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c](https://agentprime.io/advisories/CVE-2023-3355.md) `CVE-2023-3355` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption - [Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c](https://agentprime.io/advisories/CVE-2010-3872.md) `CVE-2010-3872` · CVE record: mod_fcgid and 4 more · CVSS 7.5 High · Not analysed yet · Published 20 Nov 2010 · Tags: Memory corruption Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .