Red Hat Fedora vulnerabilities

9 CVEs affecting Red Hat Fedora, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19139, published 2018-11-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-5962, published 2008-05-22. High severity, CVSS 7.1. EPSS: 12.1% chance of exploitation in the next 30 days. Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to…
CVE-2007-4134, published 2007-08-30. Medium severity, CVSS 6.8. EPSS: 3% chance of exploitation in the next 30 days. Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory…
CVE-2007-6284, published 2008-01-12. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.
CVE-2018-19139, published 2018-11-09. Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
CVE-2008-3832, published 2008-10-03. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9, allows local users to cause a denial of service (NULL pointer…
CVE-2009-1573, published 2009-05-06. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by…
CVE-2009-3080, published 2009-11-20. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a…
CVE-2011-1011, published 2011-02-24. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and…
CVE-2008-3524, published 2008-09-29. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under (1) /var/lock or (2)…