Known vulnerabilities in Fedora 23 - page 14

Software: Fedora
Version: 23
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 559
Public exploits: 38
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 23 Fedora 23 is affected by 559 vulnerabilities: 4 critical, 107 high, 246 medium, 202 low Critical High Medium Low

Vulnerabilities (559)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18291 - Improper input validation
CVE-2016-4008
CWE-20 Medium
No
No
- 17.04.2019 SB2016050501
SB2017032807
SB2016050502
and 5 more
#VU12259 - Resource exhaustion
CVE-2016-3672
CWE-400 Low
Public exploit available
No
- 27.04.2018 SB2016031004
SB2018041047
SB2018041056
and 4 more
#VU251 - Permissions, Privileges, and Access Controls
CVE-2015-8325
CWE-264 Low
No
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 10 more
#VU241 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2118
CWE-300 High
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU240 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2115
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU239 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2114
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 11 more
#VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2113
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 16 more
#VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2112
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU236 - Authentication Bypass by Spoofing
CVE-2016-2111
CWE-290 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110
CWE-300 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU234 - Resource exhaustion
CVE-2015-5370
CWE-400 Medium
No
No
- 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 22 more
#VU90378 - Out-of-bounds read
CVE-2016-3955
CWE-125 High
No
No
- 04.07.2016 SB2016070421
SB2016042012
SB2016042013
and 1 more
#VU32310 - Improper input validation
CVE-2016-3959
CWE-20 Medium
No
No
- 23.05.2016 SB2016052303
SB2016042604
SB2016042114
and 4 more
#VU33071 - Heap-based Buffer Overflow
CVE-2015-8868
CWE-122 Medium
No
No
- 06.05.2016 SB2016050603
SB2016060205
SB2016111804
and 4 more
#VU90904 - Double Free
CVE-2016-3951
CWE-415 Low
No
No
- 02.05.2016 SB2016050216
SB2016041332
SB2016041404
and 1 more
#VU91494 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2015-8839
CWE-362 Medium
No
No
- 02.05.2016 SB2016050220
SB2016041332
SB2016041404
and 1 more
#VU40342 - Improper input validation
CVE-2016-3071
CWE-20 Medium
No
No
- 18.04.2016 SB2016041802
SB2016040709
SB2016040710
and 1 more
#VU40343 - Use of Externally-Controlled Format String
CVE-2015-8106
CWE-134 High
No
No
- 18.04.2016 SB2016041803
SB2016033103
SB2016033104
and 4 more
#VU33074 - Improper input validation
CVE-2016-3961
CWE-20 Low
No
No
- 15.04.2016 SB2016050934
SB2016050935
SB2016042012
and 2 more
#VU32418 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2015-4342
CWE-89 Medium
No
No
- 17.06.2015 SB2015061701
SB2015061522
SB2016032409
and 3 more


Showing elements 261 - 280 out of 559