Vulnerabilities > Fedoraproject > Fedora > 38

DATE CVE VULNERABILITY TITLE RISK
2024-02-29 CVE-2024-1939 Type Confusion vulnerability in multiple products
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-843
8.8
2024-02-28 CVE-2024-27285 Cross-site Scripting vulnerability in multiple products
YARD is a Ruby Documentation tool.
network
low complexity
yardoc fedoraproject debian CWE-79
6.1
2024-02-26 CVE-2024-1622 Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too quickly after opening.
network
low complexity
nlnetlabs fedoraproject
7.5
2024-02-26 CVE-2024-23835 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
low complexity
oisf fedoraproject CWE-770
7.5
2024-02-26 CVE-2024-23836 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
low complexity
oisf fedoraproject CWE-770
7.5
2024-02-26 CVE-2024-23837 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
LibHTP is a security-aware parser for the HTTP protocol.
network
low complexity
oisf fedoraproject CWE-770
7.5
2024-02-26 CVE-2024-23839 Use After Free vulnerability in multiple products
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
high complexity
oisf fedoraproject CWE-416
8.1
2024-02-26 CVE-2024-24568 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
network
low complexity
oisf fedoraproject
5.3
2024-02-23 CVE-2024-25629 Out-of-bounds Read vulnerability in multiple products
c-ares is a C library for asynchronous DNS requests.
local
low complexity
c-ares fedoraproject CWE-125
5.5
2024-02-22 CVE-2023-52160 Improper Authentication vulnerability in multiple products
The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass.
network
low complexity
debian redhat fedoraproject w1-fi CWE-287
6.5