Known vulnerabilities in Fedora 34 - page 16

Software: Fedora
Version: 34
Software CPE: cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
Total vulnerabilities: 1344
Public exploits: 89
Known exploited (KEV): 45
Highest CVSSv4 Score: 9.5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fedora version 34 Fedora 34 is affected by 1344 vulnerabilities: 25 critical, 411 high, 572 medium, 335 low Critical High Medium Low

Vulnerabilities (1344)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78667 - Out-of-bounds write
CVE-2021-45930
CWE-787 Low
No
No
- 25.07.2023 SB2022010102
SB2023072568
SB2023072625
and 15 more
#VU70427 - Integer overflow
CVE-2021-3933
CWE-190 Medium
No
No
- 19.12.2022 SB2021111811
SB2022121932
SB2021120144
and 5 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
- 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU61292 - Missing release of memory after effective lifetime
CVE-2021-3998
CWE-401 Medium
No
No
- 14.03.2022 SB2022031429
SB2022031430
SB2022030129
and 8 more
#VU60988 - Memory corruption
CVE-2022-0330
CWE-119 Low
No
No
- 03.03.2022 SB2022030318
SB2022030319
SB2022030320
and 58 more
#VU60772 - Heap-based Buffer Overflow
CVE-2022-0359
CWE-122 High
No
No
- 22.02.2022 SB2022022220
SB2022022221
SB2022031527
and 30 more
#VU60771 - Memory corruption
CVE-2022-0351
CWE-119 High
No
No
- 22.02.2022 SB2022022220
SB2022022221
SB2022060217
and 23 more
#VU60291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-23959
CWE-444 Medium
No
No
- 03.02.2022 SB2022020331
SB2022020415
SB2022020416
and 14 more
#VU60187 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-44141
CWE-59 Low
No
No
- 31.01.2022 SB2022013112
SB2022072819
SB2022121502
and 12 more
#VU60186 - Out-of-bounds write
CVE-2021-44142
CWE-787 High
Public exploit available
No
- 31.01.2022 SB2022013111
SB2022013118
SB2022013119
and 36 more
#VU60185 - Insufficient Verification of Data Authenticity
CVE-2022-0336
CWE-345 Low
No
No
- 31.01.2022 SB2022013110
SB2022021417
SB2022041954
and 10 more
#VU130487 - Improper Output Neutralization for Logs
CVE-2022-23949
CWE-117 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130485 - Improper Access Control
CVE-2022-23950
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130484 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2022-23951
CWE-409 Medium
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130488 - Improper Access Control
CVE-2022-23948
CWE-284 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130483 - Incorrect Permission Assignment for Critical Resource
CVE-2022-23952
CWE-732 Low
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU130489 - Authentication Bypass by Spoofing
CVE-2021-43310
CWE-290 High
No
No
- 27.01.2022 SB2022012791
SB2022012792
SB2022012793
#VU59830 - Cross-Site Request Forgery (CSRF)
CVE-2022-0197
CWE-352 Low
No
No
- 19.01.2022 SB2022011923
SB2022020196
SB2022020197
and 3 more
#VU59828 - Cross-Site Request Forgery (CSRF)
CVE-2022-0238
CWE-352 Low
No
No
- 19.01.2022 SB2022011923
SB2022020196
SB2022020197
and 3 more
#VU58233 - Divide By Zero
CVE-2021-3941
CWE-369 Low
No
No
- 18.11.2021 SB2021111811
SB2021111812
SB2021111746
and 7 more


Showing elements 301 - 320 out of 1344