fedoraproject Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fedoraproject/ Sun, 26 Feb 2023 09:09:46 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png fedoraproject Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/fedoraproject/ 32 32 CVE-2008-2944 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2944/ Sun, 26 Feb 2023 09:09:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2944/ Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

The post CVE-2008-2944 appeared first on CVE Vulnerability.

]]> Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core 6 (FC6) allows local users to cause a denial of service (oops), as demonstrated by a crash when running the GNU GDB testsuite, a different vulnerability than CVE-2008-2365.

The post CVE-2008-2944 appeared first on CVE Vulnerability.

]]> CVE-2007-6283 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-6283/ Sun, 26 Feb 2023 09:08:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-6283/ Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.

The post CVE-2007-6283 appeared first on CVE Vulnerability.

]]> Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.

The post CVE-2007-6283 appeared first on CVE Vulnerability.

]]> CVE-2007-4364 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4364/ Sun, 26 Feb 2023 09:07:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4364/ Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain “unexpected / strange response” from an LDAP server, and (2) a reauthentication attempt that throws an […]

The post CVE-2007-4364 appeared first on CVE Vulnerability.

]]> Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), related to (1) a nonexistent account name in combination with an empty password, which allows remote attackers to trigger a certain “unexpected / strange response” from an LDAP server, and (2) a reauthentication attempt that throws an exception, which allows remote attackers to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector.

The post CVE-2007-4364 appeared first on CVE Vulnerability.

]]> CVE-2007-4129 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4129/ Sun, 26 Feb 2023 09:07:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4129/ CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.

The post CVE-2007-4129 appeared first on CVE Vulnerability.

]]> CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.

The post CVE-2007-4129 appeared first on CVE Vulnerability.

]]> CVE-2007-3847 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3847/ Sun, 26 Feb 2023 09:06:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3847/ The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

The post CVE-2007-3847 appeared first on CVE Vulnerability.

]]> The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.

The post CVE-2007-3847 appeared first on CVE Vulnerability.

]]> CVE-2007-3103 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3103/ Sun, 26 Feb 2023 09:06:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3103/ The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

The post CVE-2007-3103 appeared first on CVE Vulnerability.

]]> The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.

The post CVE-2007-3103 appeared first on CVE Vulnerability.

]]> CVE-2007-1321 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1321/ Sun, 26 Feb 2023 09:05:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1321/ Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 “receive” integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues […]

The post CVE-2007-1321 appeared first on CVE Vulnerability.

]]> Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 “receive” integer signedness error. NOTE: this identifier was inadvertently used by some sources to cover multiple issues that were labeled “NE2000 network driver and the socket code,” but separate identifiers have been created for the individual vulnerabilities since there are sometimes different fixes; see CVE-2007-5729 and CVE-2007-5730.

The post CVE-2007-1321 appeared first on CVE Vulnerability.

]]> CVE-2007-1320 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1320/ Sun, 26 Feb 2023 09:05:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1320/ Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to “attempting to mark non-existent regions as dirty,” aka the “bitblt” heap overflow.

The post CVE-2007-1320 appeared first on CVE Vulnerability.

]]> Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to “attempting to mark non-existent regions as dirty,” aka the “bitblt” heap overflow.

The post CVE-2007-1320 appeared first on CVE Vulnerability.

]]> CVE-2018-14638 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14638/ Sun, 26 Feb 2023 06:46:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14638/ A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.

The post CVE-2018-14638 appeared first on CVE Vulnerability.

]]> A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.

The post CVE-2018-14638 appeared first on CVE Vulnerability.

]]> CVE-2018-14648 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14648/ Sun, 26 Feb 2023 06:46:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14648/ A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.

The post CVE-2018-14648 appeared first on CVE Vulnerability.

]]> A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.

The post CVE-2018-14648 appeared first on CVE Vulnerability.

]]>