Fedoraproject Extra Packages For Enterprise Linux vulnerabilities, page 3
76 vulnerabilities
Known vulnerabilities in Fedoraproject Extra Packages For Enterprise Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-32545debianimagemagick+5
EPSS score1.40%
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.CVE-2022-3213alpinetiff+7EPSS score0.49%
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.CVE-2024-0232debiansqlite3+5EPSS score0.38%
A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.CVE-2023-1906debianimagemagick+9EPSS score0.59%
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.CVE-2023-1289chainguardimagemagick-6+34EPSS score0.86%
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G.CVE-2023-51766chainguardexim+8EPSS score1.10%
Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.CVE-2023-26590debiansox+5EPSS score0.21%
A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service.CVE-2023-0056chainguardhaproxy-2.4+27EPSS score1.83%
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.CVE-2023-4256broadcomtcpreplay+4EPSS score0.33%
Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a specifically crafted file to the tcprewrite binary. This flaw enables a local attacker to initiate a Denial of Service (DoS) attack.CVE-2023-4255debianw3m+6EPSS score0.32%
An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. This vulnerability is triggered by supplying a specially crafted HTML file to the w3m binary. Exploitation of this flaw could lead to application crashes, resulting in a denial of service condition.CVE-2023-38252alpinew3m+6EPSS score0.36%
An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.CVE-2023-38253alpinew3m+6EPSS score0.36%
An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file.CVE-2023-5540ubuntumoodle+3EPSS score2.27%
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers.CVE-2023-5539ubuntumoodle+3EPSS score2.19%
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.CVE-2023-5548ubuntumoodle+3EPSS score0.32%
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.CVE-2023-5549ubuntumoodle+3EPSS score0.59%
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.CVE-2023-5550ubuntumoodle+3EPSS score1.62%
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution.CVE-2023-5551ubuntumoodle+3EPSS score0.29%
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.CVE-2023-5542ubuntumoodle+3EPSS score0.48%
Students in "Only see own membership" groups could see other students in the group, which should be hidden.CVE-2023-5545ubuntumoodle+3EPSS score0.58%
H5P metadata automatically populated the author with the user's username, which could be sensitive information.