Known vulnerabilities in Fedora 23 - page 9

Software: Fedora
Version: 23
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 559
Public exploits: 38
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 23 Fedora 23 is affected by 559 vulnerabilities: 4 critical, 107 high, 246 medium, 202 low Critical High Medium Low

Vulnerabilities (559)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35027 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2016-1000110
CWE-601 Low
No
No
- 27.11.2019 SB2019112724
SB2016090103
SB2016122807
and 6 more
#VU10733 - Buffer overflow
CVE-2016-1669
CWE-120 Low
No
No
- 27.02.2018 SB2016042302
SB2017040503
SB2018022115
and 7 more
#VU6351 - Heap-based Buffer Overflow
CVE-2016-6354
CWE-122 High
No
No
- 19.04.2017 SB2017041905
SB2016071906
SB2017050201
and 13 more
#VU39670 - Resource exhaustion
CVE-2016-6171
CWE-400 High
No
No
- 09.02.2017 SB2017020923
SB2016080944
SB2016080945
and 6 more
#VU811 - Improper input validation
CVE-2016-1238
CWE-20 Medium
No
No
- 10.10.2016 SB2019080608
SB2017101067
SB2021081069
and 10 more
#VU378 - Improper Authorization
CVE-2016-5420
CWE-285 Medium
No
No
- 08.09.2016 SB2016081014
SB2016080406
SB2016081710
and 6 more
#VU32268 - Out-of-bounds read
CVE-2016-6263
CWE-125 Medium
No
No
- 07.09.2016 SB2016090710
SB2016080537
SB2019081555
and 4 more
#VU32269 - Out-of-bounds read
CVE-2015-8948
CWE-125 Medium
No
No
- 07.09.2016 SB2016090711
SB2016080534
SB2016072216
and 3 more
#VU358 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-6136
CWE-362 Low
No
No
- 07.09.2016 SB2016101301
SB2016101126
SB2016101127
and 3 more
#VU40137 - Use After Free
CVE-2015-8949
CWE-416 High
No
No
- 20.08.2016 SB2016082006
SB2016072611
SB2016072612
#VU315 - Exposure of sensitive information to an unauthorized actor
CVE-2016-5424
CWE-200 Medium
No
No
- 15.08.2016 SB2016081102
SB2016081809
SB2016081402
and 16 more
#VU314 - Memory corruption
CVE-2016-5423
CWE-119 Critical
No
No
- 15.08.2016 SB2016081102
SB2016081809
SB2016081402
and 16 more
#VU32257 - Double Free
CVE-2016-5384
CWE-415 Low
No
No
- 13.08.2016 SB2016081302
SB2016081109
SB2016080538
and 2 more
#VU32262 - Use After Free
CVE-2016-5421
CWE-416 High
No
No
- 10.08.2016 SB2016081015
SB2016080407
SB2016081710
and 4 more
#VU32263 - Cryptographic Issues
CVE-2016-5419
CWE-310 Medium
No
No
- 10.08.2016 SB2016081016
SB2016080405
SB2017042907
and 6 more
#VU273 - Uncontrolled Search Path Element
CVE-2016-1238
CWE-427 Low
No
No
- 10.08.2016 SB2016080701
SB2016072502
SB2018121702
and 13 more
#VU32240 - NULL Pointer Dereference
CVE-2016-3120
CWE-476 Medium
No
No
- 01.08.2016 SB2016080111
SB2016091423
SB2017020665
and 6 more
#VU217 - Missing release of memory after effective lifetime
CVE-2016-5400
CWE-401 Low
No
No
- 26.07.2016 SB2016072501
SB2016072907
SB2016072908
#VU197 - Resource exhaustion
CVE-2016-3092
CWE-400 Medium
No
No
- 22.07.2016 SB2016070602
SB2016070203
SB2016063002
and 20 more
#VU164 - Memory corruption
CVE-2016-2775
CWE-119 Medium
No
No
- 19.07.2016 SB2017082408
SB2016072005
SB2016072207
and 13 more


Showing elements 161 - 180 out of 559