Known vulnerabilities in Fedora 22

Software: Fedora
Version: 22
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 512
Public exploits: 38
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 22 Fedora 22 is affected by 512 vulnerabilities: 3 critical, 93 high, 244 medium, 172 low Critical High Medium Low

Vulnerabilities (512)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53699 - Memory corruption
CVE-2016-6160
CWE-119 Medium
No
No
- 01.06.2021 SB2017012331
SB2016070713
SB2016070714
and 4 more
#VU34816 - Improper input validation
CVE-2015-4411
CWE-20 Medium
No
No
- 20.02.2020 SB2020022033
#VU12378 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-4472
CWE-611 Low
No
No
- 07.05.2018 SB2017092304
SB2016092617
SB2017011129
and 7 more
#VU38065 - Use After Free
CVE-2015-7687
CWE-416 High
No
No
- 16.10.2017 SB2017101617
SB2015100304
SB2015100305
and 6 more
#VU38128 - Key Management Errors
CVE-2015-7503
CWE-320 Medium
No
No
- 10.10.2017 SB2015082510
SB2016061201
SB2016061202
and 1 more
#VU38129 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-8239
CWE-362 Low
No
No
- 10.10.2017 SB2017101040
SB2016071152
SB2016071153
#VU38231 - Cross-Site Request Forgery (CSRF)
CVE-2015-5607
CWE-352 High
No
No
- 20.09.2017 SB2017092020
SB2023031526
SB2015071619
and 1 more
#VU38233 - Improper Certificate Validation
CVE-2015-3420
CWE-295 Medium
No
No
- 19.09.2017 SB2017091918
SB2015042807
SB2015042808
#VU4062 - Resource exhaustion
CVE-2016-1583
CWE-400 Low
Public exploit available
No
- 01.10.2016 SB2016061001
SB2016061002
SB2016061603
and 5 more
#VU3613 - Use After Free
CVE-2016-5773
CWE-416 High
Public exploit available
No
- 20.09.2016 SB2016061503
SB2018032605
SB2016062312
and 2 more
#VU200 - Memory corruption
CVE-2016-0718
CWE-119 Critical
No
No
- 22.07.2016 SB2016051802
SB2016121505
SB2017092304
and 13 more
#VU114 - Improper Neutralization of Parameter/Argument Delimiters
CVE-2016-6185
CWE-141 High
No
No
- 11.07.2016 SB2016072502
SB2016071110
SB2016071116
and 3 more
#VU97 - Memory corruption
CVE-2016-4994
CWE-119 Critical
No
No
- 06.07.2016 SB2016070503
SB2016071806
SB2016070204
and 6 more
#VU3800 - Data Handling
CVE-2016-4470
CWE-19 Low
No
No
- 01.07.2016 SB2016080934
SB2016080935
SB2016080936
and 9 more
#VU32275 - Security Features
CVE-2016-4971
CWE-254 High
Public exploit available
No
- 30.06.2016 SB2016063014
SB2016070507
SB2016071408
and 7 more
#VU28 - Memory corruption
CVE-2016-4998
CWE-119 Medium
No
No
- 27.06.2016 SB2016063005
SB2016063006
SB2016062504
and 2 more
#VU27 - Memory corruption
CVE-2016-4997
CWE-119 High
Public exploit available
No
- 27.06.2016 SB2017062912
SB2017062113
SB2016063005
and 16 more
#VU32074 - Improper input validation
CVE-2016-5300
CWE-20 Medium
No
No
- 16.06.2016 SB2016061604
SB2017021720
SB2017011129
and 6 more
#VU33052 - Cryptographic Issues
CVE-2012-6702
CWE-310 Medium
No
No
- 16.06.2016 SB2016061605
SB2017021719
SB2017011129
and 5 more
#VU40252 - Improper Link Resolution Before File Access ('Link Following')
CVE-2016-3096
CWE-59 Low
No
No
- 03.06.2016 SB2016060301
SB2016072022
SB2016041502
and 10 more


Showing elements 1 - 20 out of 512