Known vulnerabilities in Fedora 25

Software: Fedora
Version: 25
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1035
Public exploits: 73
Known exploited (KEV): 10

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 25 Fedora 25 is affected by 1035 vulnerabilities: 3 critical, 265 high, 271 medium, 496 low Critical High Medium Low

Vulnerabilities (1035)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14021 - NULL Pointer Dereference
CVE-2017-17440
CWE-476 Low
No
No
- 26.07.2018 SB2018072616
SB2020112333
SB20171211345
and 2 more
#VU13603 - Exposure of sensitive information to an unauthorized actor
CVE-2017-17042
CWE-200 Low
No
No
- 07.07.2018 SB2018070909
SB2017120130
SB2017120131
and 1 more
#VU9541 - Command injection
CVE-2017-1000159
CWE-77 High
No
No
- 05.12.2017 SB2017071413
SB2017120503
SB2018041706
and 3 more
#VU9441 - Missing release of memory after effective lifetime
CVE-2017-15094
CWE-401 Medium
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121529
and 5 more
#VU9440 - Improper Access Control
CVE-2017-15093
CWE-284 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121528
and 5 more
#VU9439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15092
CWE-79 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121534
and 5 more
#VU9437 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-15090
CWE-300 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121531
and 5 more
#VU9432 - Integer overflow
CVE-2017-1000158
CWE-190 High
No
No
- 28.11.2017 SB2017112809
SB2017112810
SB2017112811
and 20 more
#VU37876 - Memory corruption
CVE-2017-16938
CWE-119 High
No
No
- 24.11.2017 SB2017112409
SB2018010703
SB2017120412
and 3 more
#VU37892 - Use After Free
CVE-2017-1000211
CWE-416 Medium
No
No
- 17.11.2017 SB2017111713
SB20171211340
SB20171211341
#VU37894 - Integer overflow
CVE-2017-1000229
CWE-190 High
No
No
- 17.11.2017 SB2017111716
SB2018010703
SB2017120412
and 3 more
#VU8945 - Improper Access Control
CVE-2017-15387
CWE-284 Low
No
No
- 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8944 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-15386
CWE-451 Low
No
No
- 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5124
CWE-79 Low
Public exploit available
No
- 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8942 - Out-of-bounds write
CVE-2017-5133
CWE-787 High
No
No
- 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8930 - Memory corruption
CVE-2017-5132
CWE-119 High
No
No
- 25.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8928 - Heap-based Buffer Overflow
CVE-2017-5128
CWE-122 High
No
No
- 25.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8927 - Use After Free
CVE-2017-5129
CWE-416 High
No
No
- 25.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8926 - Use After Free
CVE-2017-5127
CWE-416 High
No
No
- 25.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8925 - Use After Free
CVE-2017-5126
CWE-416 High
No
No
- 25.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more


Showing elements 1 - 20 out of 1035