Vulnerabilities > Fedoraproject

DATE CVE VULNERABILITY TITLE RISK
2020-05-20 CVE-2020-10726 Integer Overflow or Wraparound vulnerability in multiple products
A vulnerability was found in DPDK versions 19.11 and above.
local
low complexity
dpdk fedoraproject opensuse oracle CWE-190
4.4
2020-05-20 CVE-2020-10725 Improper Initialization vulnerability in multiple products
A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host.
network
low complexity
dpdk fedoraproject opensuse oracle CWE-665
7.7
2020-05-19 CVE-2020-13164 Uncontrolled Recursion vulnerability in multiple products
In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash.
network
low complexity
wireshark debian opensuse fedoraproject CWE-674
7.5
2020-05-19 CVE-2020-10724 Out-of-bounds Read vulnerability in multiple products
A vulnerability was found in DPDK versions 18.11 and above.
local
low complexity
dpdk canonical fedoraproject CWE-125
4.4
2020-05-19 CVE-2020-10723 Integer Overflow or Wraparound vulnerability in multiple products
A memory corruption issue was found in DPDK versions 17.05 and above.
6.7
2020-05-19 CVE-2020-10722 Integer Overflow or Wraparound vulnerability in multiple products
A vulnerability was found in DPDK versions 18.05 and above.
6.7
2020-05-19 CVE-2020-10995 Resource Exhaustion vulnerability in multiple products
PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks.
network
low complexity
powerdns fedoraproject debian opensuse CWE-400
7.5
2020-05-19 CVE-2020-1695 A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response.
network
low complexity
redhat fedoraproject
7.5
2020-05-19 CVE-2020-8617 Reachable Assertion vulnerability in multiple products
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server.
network
high complexity
isc debian fedoraproject opensuse canonical CWE-617
5.9
2020-05-19 CVE-2020-12663 Infinite Loop vulnerability in multiple products
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
7.5