Known vulnerabilities in Fedora 34

Software: Fedora
Version: 34
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1344
Public exploits: 89
Known exploited (KEV): 45

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 34 Fedora 34 is affected by 1344 vulnerabilities: 25 critical, 411 high, 572 medium, 335 low Critical High Medium Low

Vulnerabilities (1344)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-3524
CWE-113 Low
No
No
- 21.08.2025 SB2021051735
SB2025082110
SB2021051423
and 7 more
#VU130482 - Improper Access Control
CVE-2022-1053
CWE-284 High
No
No
- 04.05.2022 SB2022050459
SB2022050460
SB2022050461
and 1 more
#VU128070 - Improper Privilege Management
CVE-2022-27650
CWE-269 Low
No
No
- 26.03.2022 SB2022032618
SB2022033129
SB2022051086
and 3 more
#VU130487 - Improper Output Neutralization for Logs
CVE-2022-23949
CWE-117 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130485 - Improper Access Control
CVE-2022-23950
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130484 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2022-23951
CWE-409 Medium
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130488 - Improper Access Control
CVE-2022-23948
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130483 - Incorrect Permission Assignment for Critical Resource
CVE-2022-23952
CWE-732 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130489 - Authentication Bypass by Spoofing
CVE-2021-43310
CWE-290 High
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU127033 - Use After Free
CVE-2021-39216
CWE-416 Low
No
No
- 17.09.2021 SB2021091726
SB2021092244
SB2021092504
and 1 more
#VU127031 - Free of Memory not on the Heap
CVE-2021-39218
CWE-590 Medium
No
No
- 17.09.2021 SB2021091726
SB2021092244
SB2021092504
and 1 more
#VU127032 - Type confusion
CVE-2021-39219
CWE-843 Low
No
No
- 17.09.2021 SB2021091726
SB2021092244
SB2021092504
and 1 more
#VU53201 - Resource Management Errors
CVE-2021-29471
CWE-399
No
No
- 12.05.2021 SB2021051229
SB2021052516
SB2021071802
and 1 more
#VU129603 - Improper input validation
CVE-2021-21393
CWE-20 Medium
No
No
- 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129602 - Improper input validation
CVE-2021-21394
CWE-20 Medium
No
No
- 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129607 - Improper Access Control
CVE-2021-21392
CWE-284 Medium
No
No
- 12.04.2021 SB2021041242
SB2021071802
SB2021072328
#VU129604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21333
CWE-79 Low
No
No
- 25.03.2021 SB2021032548
SB2021071802
SB2021072328
#VU129608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21332
CWE-79 Medium
No
No
- 25.03.2021 SB2021032548
SB2021071802
SB2021072328
#VU51007 - Improper input validation
CVE-2021-21274
CWE-20 Low
No
No
- 01.03.2021 SB2021030111
SB2021071802
SB2021072328
#VU51006 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-21273
CWE-601 Medium
No
No
- 01.03.2021 SB2021030111
SB2021071802
SB2021072328


Showing elements 1 - 20 out of 1344