« List of all vendors

Fedora

List of Opam related CVEs (44 found)

CVE-2024-1312 – Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu
2/8/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-6780 – Glibc: integer overflow in __vsyslog_internal()
1/31/2024
Affected packages: gettext-stub
Medium severity
CVE-2023-6779 – Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()
1/31/2024
Affected packages: gettext-stub
High severity
CVE-2023-6246 – Glibc: heap-based buffer overflow in __vsyslog_internal()
1/31/2024
Affected packages: gettext-stub
High severity
CVE-2023-6200 – Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability
1/28/2024
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
High severity
CVE-2023-6560 – Kernel: io_uring out of boundary memory access in __io_uaddr_map()
12/8/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-5972 – Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c
11/23/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
High severity
CVE-2023-6039 – Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect
11/9/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-1194 – Use-after-free in parse_lease_state()
11/3/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
High severity
CVE-2023-1193 – Use-after-free in setup_async_work()
11/1/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-1192 – Use-after-free in smb2_is_status_io_timeout()
11/1/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-42752 – Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access
10/13/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-5158 – Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c
9/25/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev ... (27)
Medium severity
CVE-2023-25584 – Out of bounds read in parse_module function in bfd/vms-alpha.c
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-25585 – Field `file_table` of `struct module *module` is uninitialized
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-25586 – Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-25588 – Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-32611 – G_variant_byteswap() can take a long time with some non-normal inputs
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-29499 – Gvariant offset table entry size is not checked in is_normal()
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-32665 – Gvariant deserialisation does not match spec for non-normal data
9/14/2023
Affected packages: conf-glib-2
Medium severity