Known vulnerabilities in Fedora 25 - page 32

Software: Fedora
Version: 25
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1035
Public exploits: 73
Known exploited (KEV): 10
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 25 Fedora 25 is affected by 1035 vulnerabilities: 3 critical, 265 high, 271 medium, 496 low Critical High Medium Low

Vulnerabilities (1035)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12125 - Configuration
CVE-2017-6463
CWE-16 Medium
No
No
- 24.04.2018 SB2017042007
SB2018041051
SB2017102612
and 5 more
#VU7390 - Improper input validation
CVE-2017-6464
CWE-20 Medium
No
No
- 10.07.2017 SB2017070612
SB2017042007
SB2018041051
and 6 more
#VU7389 - Buffer overflow
CVE-2017-6462
CWE-120 Low
No
No
- 10.07.2017 SB2017070612
SB2017042007
SB2018041051
and 6 more
#VU7386 - Buffer overflow
CVE-2017-6458
CWE-120 Low
No
No
- 07.07.2017 SB2017070612
SB2017042007
SB2017042202
and 5 more
#VU7385 - Out-of-bounds write
CVE-2017-6451
CWE-787 Low
No
No
- 07.07.2017 SB2017070612
SB2017042007
SB2017042202
and 4 more
#VU6630 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-2619
CWE-362 Low
Public exploit available
No
- 23.05.2017 SB2017052305
SB2017032402
SB2017052209
and 22 more
#VU32141 - Improper Certificate Validation
CVE-2017-2784
CWE-295 High
No
No
- 20.04.2017 SB2017042011
SB2017032208
SB2017032209
and 9 more
#VU39306 - Improper input validation
CVE-2017-7394
CWE-20 Medium
No
No
- 01.04.2017 SB2017040102
SB2017040416
SB2017040417
and 1 more
#VU39307 - Integer overflow
CVE-2017-7395
CWE-190 Medium
No
No
- 01.04.2017 SB2017040102
SB2017040416
SB2017040417
and 1 more
#VU39308 - Missing release of memory after effective lifetime
CVE-2017-7396
CWE-401 Medium
No
No
- 01.04.2017 SB2017040102
SB2017040416
SB2017040417
and 1 more
#VU39365 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-5330
CWE-78 High
No
No
- 27.03.2017 SB2017032713
SB2017011345
SB2017012906
and 1 more
#VU39375 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-2641
CWE-89 High
Public exploit available
No
- 26.03.2017 SB2017032603
SB2017031307
SB20170314171
and 3 more
#VU39376 - Exposure of sensitive information to an unauthorized actor
CVE-2017-2643
CWE-200 Medium
No
No
- 26.03.2017 SB2017032603
SB2017031307
SB20170314171
and 3 more
#VU39377 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-2644
CWE-79 Low
No
No
- 26.03.2017 SB2017032603
SB2017031307
SB20170314171
and 3 more
#VU39378 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-2645
CWE-79 Low
No
No
- 26.03.2017 SB2017032603
SB2017031307
SB20170314171
and 3 more
#VU6131 - Integer overflow
CVE-2017-5428
CWE-190 High
No
No
- 21.03.2017 SB2017032101
SB2017031801
SB2017032006
and 4 more
#VU39449 - Improper Authentication
CVE-2017-6967
CWE-287 Medium
No
No
- 17.03.2017 SB2017031705
SB2017033019
SB2017033020
and 2 more
#VU39452 - Out-of-bounds read
CVE-2017-5849
CWE-125 Medium
No
No
- 15.03.2017 SB2017031531
SB2024020885
SB2024020886
#VU90816 - Use After Free
CVE-2017-6874
CWE-416 Low
No
No
- 14.03.2017 SB20170314106
SB2017031632
SB2017031633
and 4 more
#VU39798 - Memory corruption
CVE-2016-7567
CWE-119 High
Public exploit available
No
- 23.01.2017 SB2017012316
SB20170314169
SB20170314170


Showing elements 621 - 640 out of 1035