The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of RedHat Fedora

PostgreSQL: information disclosure via CONFLICT DO UPDATE
A local attacker can read a memory fragment via CONFLICT DO UPDATE of PostgreSQL, in order to obtain sensitive information...
528379, CVE-2018-10925, DSA-2018-208, DSA-4269-1, FEDORA-2018-d8f5aea89d, openSUSE-SU-2018:2599-1, openSUSE-SU-2018:3449-1, openSUSE-SU-2020:1227-1, RHSA-2018:2511-01, RHSA-2018:2565-01, RHSA-2018:2566-01, SUSE-SU-2018:2564-1, SUSE-SU-2018:3377-1, USN-3744-1, VIGILANCE-VUL-26960
PostgreSQL: privilege escalation via Libpq Host Connection Parameters
An attacker can bypass restrictions via Libpq Host Connection Parameters of PostgreSQL, in order to escalate his privileges...
528379, CVE-2018-10915, DLA-1464-1, DSA-2018-208, DSA-2019-131, DSA-4269-1, FEDORA-2018-d8f5aea89d, openSUSE-SU-2018:2599-1, openSUSE-SU-2018:3449-1, openSUSE-SU-2018:4007-1, openSUSE-SU-2020:1227-1, RHSA-2018:2511-01, RHSA-2018:2557-01, RHSA-2018:2565-01, RHSA-2018:2566-01, SUSE-SU-2018:2564-1, SUSE-SU-2018:3287-1, SUSE-SU-2018:3377-1, SUSE-SU-2018:3909-1, USN-3744-1, VIGILANCE-VUL-26959
LibRaw: integer overflow via parse_qt
An attacker can generate an integer overflow via parse_qt() of LibRaw, in order to trigger a denial of service, and possibly to run code...
CVE-2018-5815, FEDORA-2018-baa8315daa, FEDORA-2018-f37cbaafdf, openSUSE-SU-2018:2286-1, openSUSE-SU-2019:0008-1, SUSE-SU-2019:0005-1, USN-3838-1, VIGILANCE-VUL-26952
libgit2: out-of-bounds memory reading via Smart-protocol NG Packets
An attacker can force a read at an invalid address via Smart-protocol NG Packets of libgit2, in order to trigger a denial of service, or to obtain sensitive information...
FEDORA-2018-3e021c6c2e, VIGILANCE-VUL-26950
wpa_supplicant: information disclosure via EAPOL-Key Decryption
An attacker can bypass access restrictions to data via EAPOL-Key Decryption of wpa_supplicant, in order to obtain sensitive information...
CVE-2018-14526, DLA-1462-1, FEDORA-2018-41dfadd21a, FreeBSD-SA-18:11.hostapd, openSUSE-SU-2018:3527-1, openSUSE-SU-2018:3539-1, openSUSE-SU-2019:1345-1, openSUSE-SU-2020:2053-1, openSUSE-SU-2020:2059-1, RHSA-2018:3107-01, SUSE-SU-2018:3480-1, SUSE-SU-2019:1088-1, SUSE-SU-2020:3380-1, SUSE-SU-2020:3424-1, USN-3745-1, VIGILANCE-VUL-26949
Enigmail: spoofing via Header Bar
An attacker can display a fake Header Bar at the top of the HTML message, in order to deceive Enigmail users...
891, FEDORA-2018-22c1b7e738, FEDORA-2018-eacf5a9ce8, openSUSE-SU-2018:2251-1, openSUSE-SU-2018:2265-1, SUSE-SU-2018:2641-1, VIGILANCE-VUL-26935
Moodle: code execution via Quiz Question Bank Import Preview
An attacker can use a vulnerability via Quiz Question Bank Import Preview of Moodle, in order to run code...
CVE-2018-10891, FEDORA-2018-64955716d6, FEDORA-2018-ebb1e572c0, VIGILANCE-VUL-26933
Moodle: information disclosure via Privacy Data Exports
An attacker can bypass access restrictions to data via Privacy Data Exports of Moodle, in order to obtain sensitive information...
CVE-2018-10889, FEDORA-2018-64955716d6, FEDORA-2018-ebb1e572c0, VIGILANCE-VUL-26932
Moodle: information disclosure via core_course_get_categories
An attacker can bypass access restrictions to data via core_course_get_categories of Moodle, in order to obtain sensitive information...
CVE-2018-10890, FEDORA-2018-64955716d6, FEDORA-2018-ebb1e572c0, VIGILANCE-VUL-26931
Exiv2: out-of-bounds memory reading via IptcData-printStructure
An attacker can force a read at an invalid address via IptcData::printStructure() of Exiv2, in order to trigger a denial of service, or to obtain sensitive information...
CVE-2018-9305, FEDORA-2018-871fa4d189, FEDORA-2018-8b67a5c7e2, openSUSE-SU-2020:0482-1, RHSA-2019:2101-01, RHSA-2020:1577-01, VIGILANCE-VUL-26919
Our database contains other pages. You can request a free trial to read them.

Display information about RedHat Fedora: