Red Hat Fedora Core vulnerabilities

77 CVEs affecting Red Hat Fedora Core, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-6131, published 2007-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0460, published 2004-08-06. High severity, CVSS 10.0. EPSS: 45.3% chance of exploitation in the next 30 days. Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute…
CVE-2004-0595, published 2004-07-27. Medium severity, CVSS 6.8. EPSS: 45.2% chance of exploitation in the next 30 days. The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be…
CVE-2004-0557, published 2004-08-06. High severity, CVSS 10.0. EPSS: 25.1% chance of exploitation in the next 30 days. Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
CVE-2004-0989, published 2005-03-01. High severity, CVSS 10.0. EPSS: 21.7% chance of exploitation in the next 30 days. Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled…
CVE-2004-0461, published 2004-08-06. High severity, CVSS 10.0. EPSS: 16.8% chance of exploitation in the next 30 days. The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe…
CVE-2004-0918, published 2005-01-27. Medium severity, CVSS 5.0. EPSS: 15.8% chance of exploitation in the next 30 days. The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets…
CVE-2004-0882, published 2005-01-27. High severity, CVSS 10.0. EPSS: 13.7% chance of exploitation in the next 30 days. Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data…
CVE-2005-1267, published 2005-06-10. Medium severity, CVSS 5.0. EPSS: 13.5% chance of exploitation in the next 30 days. The bgp_update_print function in tcpdump 3.x does not properly handle a -1 return value from the decode_prefix4 function, which allows remote attackers to cause a denial of service (infinite loop)…
CVE-2004-1154, published 2005-01-10. High severity, CVSS 10.0. EPSS: 13.2% chance of exploitation in the next 30 days. Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code…
CVE-2004-0234, published 2004-08-18. High severity, CVSS 10.0. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute…

Latest

CVE-2007-6131, published 2007-11-26. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files.
CVE-2007-2874, published 2007-07-27. Medium severity, CVSS 5.8. EPSS: 2.5% chance of exploitation in the next 30 days. Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to execute arbitrary…
CVE-2007-2030, published 2007-04-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked.
CVE-2007-1352, published 2007-04-06. Low severity, CVSS 3.8. EPSS: 1.5% chance of exploitation in the next 30 days. Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which…
CVE-2006-6235, published 2006-12-07. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG…
CVE-2006-5701, published 2006-11-03. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a…
CVE-2006-0745, published 2006-03-21. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users…
CVE-2006-0453, published 2006-02-14. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a certain "bad BER sequence" that results in a free of uninitialized memory, as…
CVE-2006-0452, published 2006-02-14. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via a ModDN operation with a DN that contains a…
CVE-2006-0451, published 2006-02-14. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (memory consumption) via invalid BER packets that trigger an error,…