Exposición de Fedora

Operating systems
25
score de exposición
647
sitios usan
0
en explotación
2
críticos
Análisis Vexday

O histórico de vulnerabilidades catalogadas para o Fedora soma 80 CVEs, com taxa de exploração ativa abaixo da média geral do catálogo KEV, sem nenhum registro confirmado de exploração ativa no momento. Ainda assim, o EPSS mais elevado observado — atribuído à CVE-2023-1183, com pontuação de aproximadamente 0,66 — indica probabilidade não trivial de exploração para essa falha específica, o que justifica atenção prioritária mesmo na ausência de confirmação formal no KEV. O tipo de fraqueza mais frequente é CWE-416 (use-after-free), categoria historicamente associada a impactos de integridade e execução de código que demandam correção ágil. A ausência de novas CVEs nos últimos 90 dias e o total reduzido de falhas críticas (2) sugerem superfície de ataque relativamente contida, mas o perfil de risco não deve ser desconsiderado dado o potencial de exploração indicado pelo EPSS.

CVEs

82 resultados
CVE-2023-3355MEDIUMNull pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.cEPSS 0.3%CVE-2023-4569MEDIUMKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cEPSS 0.3%CVE-2023-32627MEDIUMFloating point exception in src/voc.cEPSS 0.3%CVE-2023-6560MEDIUMKernel: io_uring out of boundary memory access in __io_uaddr_map()EPSS 0.3%CVE-2023-42752MEDIUMKernel: integer overflow in igmpv3_newpack leading to exploitable memory accessEPSS 0.3%CVE-2023-5972HIGHKernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.cEPSS 0.3%CVE-2023-34318HIGHHeap-buffer-overflow in src/hcom.cEPSS 0.3%CVE-2023-4611HIGHUse after free race between mbind() and vma-locked page faultEPSS 0.3%CVE-2023-3301MEDIUMTriggerable assertion due to race condition in hot-unplugEPSS 0.3%CVE-2023-6039MEDIUMKernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnectEPSS 0.3%CVE-2023-4389HIGHKernel: btrfs: double free in btrfs_get_root_ref()EPSS 0.3%CVE-2023-1386LOWQemu: 9pfs: suid/sgid bits not dropped on file writeEPSS 0.2%CVE-2023-2680HIGHDma reentrancy issue (incomplete fix for cve-2021-3750)EPSS 0.2%CVE-2023-3180MEDIUMHeap buffer overflow in virtio_crypto_sym_op_helper()EPSS 0.2%CVE-2023-3863MEDIUMUse-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.cEPSS 0.2%CVE-2024-1312MEDIUMKernel: race condition leads to use after free during vma lock in lock_vma_under_rcuEPSS 0.2%CVE-2023-4394MEDIUMMemory leak in btrfs_get_dev_args_from_path()EPSS 0.2%CVE-2023-26590MEDIUMFloating point exception in src/aiff.cEPSS 0.2%CVE-2023-5158MEDIUMPossible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.cEPSS 0.2%CVE-2023-4155MEDIUMSev-es / sev-snp vmgexit double fetch vulnerabilityEPSS 0.2%