Fedoraproject Fedora Core — known CVE vulnerabilities

Every CVE whose affected-product data names Fedoraproject Fedora Core, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2006-5170 — CVSS 7.5 (high): pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error…
• CVE-2007-1320 — CVSS 7.2 (high): Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and…
• CVE-2007-1321 — CVSS 7.2 (high): Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a…
• CVE-2007-3103 — CVSS 6.2 (medium): The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of…
• CVE-2005-2970 — CVSS 5.0 (medium): Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service…
• CVE-2007-3847 — CVSS 5.0 (medium): The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers…
• CVE-2007-6283 — CVSS 4.9 (medium): Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to…
• CVE-2008-2944 — CVSS 4.9 (medium): Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL) 5 and Fedora Core…