| Fedora | Number Of NVD | 5104 | CRITICAL | 454 | HIGH | 2277 | MEDIUM | 2202 | LOW | 170 |
| URL | https://getfedora.org/ | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Explanation | Fedora is a Red Hat-supported distribution that actively embraces new technologies. The Fedora Project releases a new version approximately every six months, and provides updated packages (which are maintained) for approximately 13 months. This provides a mechanism for users to continue to receive package updates at any time, while allowing them to skip a release. The above text is excerpted from [https://fedoraproject.org/wiki/Fedora_Release_Life_Cycle/ja]. Support is provided for one month (four weeks) after the release of two subsequent versions, roughly one year after the release. |
||||||||
| Tag | |||||||||
| No | Type | Name | URL |
|---|---|---|---|
| 1 | https://fedoraproject.org/wiki/Fedora_Release_Life_Cycle | ||
| 2 | https://fedoraproject.org/wiki/End_of_life | ||
| 3 | https://fedoraproject.org/wiki/Releases | ||
| 4 | https://getfedora.org/server/download/ |
| No | Name | Latest Version | Release date | Initial release | Normal Support | Security Support Service Pack Support |
Extended for a fee |
Critical | High | Medium | Low |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 181 | Fedora 40 | 40 | April 23, 2024 | Oct. 17, 2023 | 453 | 2278 | 2202 | 170 | |||
| 182 | Fedora 39 | 39 | Oct. 17, 2023 | Oct. 17, 2023 | Nov. 12, 2024 | 27 | 140 | 138 | 8 | ||
| 183 | Fedora 38 | 38 | April 18, 2023 | April 18, 2023 | May 14, 2024 | 32 | 224 | 240 | 16 | ||
| 184 | Fedora 37 | 37 | Nov. 15, 2022 | Nov. 15, 2022 | Nov. 14, 2023 | 45 | 333 | 298 | 18 | ||
| 185 | Fedora 36 | 36 | May 6, 2022 | May 6, 2022 | May 16, 2023 | 60 | 341 | 292 | 6 | ||
| 186 | Fedora 35 | 35 | Nov. 2, 2021 | Nov. 2, 2021 | Dec. 13, 2022 | 91 | 572 | 411 | 21 | ||
| 187 | Fedora 34 | 34 | April 27, 2021 | April 27, 2021 | June 7, 2022 | 93 | 597 | 461 | 28 | ||
| 188 | Fedora 34 | 34 | April 20, 2021 | April 20, 2021 | June 7, 2022 | 93 | 597 | 461 | 28 | ||
| 189 | Fedora 33 | 33 | Oct. 27, 2020 | Oct. 27, 2020 | Nov. 30, 2021 | 88 | 572 | 505 | 42 | ||
| 190 | Fedora 33 | 33 | Oct. 24, 2020 | Oct. 24, 2020 | Nov. 30, 2021 | 88 | 572 | 505 | 42 | ||
| 191 | Fedora 32 | 32 | April 28, 2020 | April 28, 2020 | May 25, 2021 | 86 | 388 | 458 | 39 | ||
| 192 | Fedora 32 | 32 | April 25, 2020 | April 25, 2020 | May 25, 2021 | 86 | 388 | 458 | 39 | ||
| 193 | Fedora 31 | 31 | Oct. 29, 2019 | Oct. 29, 2019 | Nov. 24, 2020 | 90 | 349 | 401 | 28 | ||
| 194 | Fedora 31 | 31 | Oct. 25, 2019 | Oct. 25, 2019 | Nov. 24, 2020 | 90 | 349 | 401 | 28 | ||
| 195 | Fedora 30 | 30 | May 7, 2019 | May 7, 2019 | May 26, 2020 | 88 | 310 | 313 | 18 | ||
| 196 | Fedora 30 | 30 | May 7, 2019 | May 7, 2019 | May 26, 2020 | 88 | 310 | 313 | 18 | ||
| 197 | Fedora 29 | 29 | Oct. 30, 2018 | Oct. 30, 2018 | Nov. 26, 2019 | 45 | 182 | 164 | 8 | ||
| 198 | Fedora 29 | 29 | Oct. 30, 2018 | Oct. 30, 2018 | Nov. 26, 2019 | 45 | 182 | 164 | 8 | ||
| 199 | Fedora 28 | 28 | May 1, 2018 | May 1, 2018 | May 28, 2019 | 12 | 58 | 34 | 2 | ||
| 200 | Fedora 28 | 28 | May 1, 2018 | May 1, 2018 | May 28, 2019 | 12 | 58 | 34 | 2 | ||
| 201 | Fedora 27 | 27 | Nov. 14, 2017 | Nov. 14, 2017 | Nov. 30, 2018 | 2 | 5 | 5 | 1 | ||
| 202 | Fedora 27 | 27 | Oct. 24, 2017 | Oct. 24, 2017 | Nov. 30, 2018 | 2 | 5 | 5 | 1 | ||
| 203 | Fedora 26 | 26 | July 11, 2017 | July 11, 2017 | May 29, 2018 | 3 | 7 | 5 | 1 | ||
| 204 | Fedora 25 | 25 | Nov. 22, 2016 | Nov. 22, 2016 | Dec. 12, 2017 | 24 | 27 | 17 | 1 | ||
| 205 | Fedora 24 | 24 | June 21, 2016 | June 21, 2016 | Aug. 8, 2017 | 33 | 50 | 26 | 1 | ||
| 206 | Fedora 23 | 23 | Nov. 3, 2015 | Nov. 3, 2015 | Dec. 20, 2016 | 18 | 78 | 78 | 11 | ||
| 207 | Fedora 22 | 22 | May 26, 2015 | May 26, 2015 | July 19, 2016 | 15 | 76 | 93 | 14 | ||
| 208 | Fedora 21 | 21 | Dec. 9, 2014 | Dec. 9, 2014 | Dec. 1, 2015 | 4 | 64 | 84 | 10 | ||
| 209 | Fedora 20 | 20 | Dec. 17, 2013 | Dec. 17, 2013 | June 23, 2015 | 14 | 60 | 95 | 16 | ||
| 210 | Fedora 19 | 19 | July 2, 2013 | July 2, 2013 | Jan. 6, 2015 | 15 | 40 | 52 | 8 | ||
| 211 | Fedora 18 | 18 | Jan. 15, 2013 | Jan. 15, 2013 | Jan. 14, 2014 | 11 | 20 | 33 | 4 | ||
| 212 | Fedora 17 | 17 | May 29, 2012 | May 29, 2012 | July 30, 2013 | 3 | 18 | 33 | 4 | ||
| 213 | Fedora 16 | 16 | Nov. 8, 2011 | Nov. 8, 2011 | Feb. 12, 2013 | 1 | 16 | 29 | 3 | ||
| 214 | Fedora 15 | 15 | May 24, 2011 | May 24, 2011 | June 26, 2012 | 0 | 10 | 25 | 3 | ||
| 215 | Fedora 14 | 14 | Nov. 2, 2010 | Nov. 2, 2010 | Dec. 9, 2011 | 1 | 11 | 15 | 0 | ||
| 216 | Fedora 13 | 13 | May 25, 2010 | May 25, 2010 | June 24, 2011 | 5 | 15 | 25 | 2 | ||
| 217 | Fedora 12 | 12 | Nov. 17, 2009 | Nov. 17, 2009 | Dec. 2, 2010 | 3 | 8 | 14 | 1 | ||
| 218 | Fedora 11 | 11 | June 9, 2009 | June 9, 2009 | June 25, 2010 | 0 | 10 | 20 | 0 | ||
| 219 | Fedora 10 | 10 | Nov. 25, 2008 | Nov. 25, 2008 | Dec. 17, 2009 | 0 | 13 | 13 | 4 | ||
| 220 | Fedora 9 | 9 | May 13, 2008 | May 13, 2008 | July 10, 2009 | 2 | 15 | 16 | 1 | ||
| 221 | Fedora 8 | 8 | Nov. 8, 2007 | Nov. 8, 2007 | Jan. 7, 2009 | 4 | 10 | 16 | 1 | ||
| 222 | Fedora 7 | 7 | May 31, 2007 | May 31, 2007 | June 13, 2008 | 2 | 6 | 13 | 0 |
| No | CVSS3 CVSS2 |
Level Attach Vector |
Title | CWE | CVE | cpe23Uri | or higher | or less | more than | less than | Update date Published date |
Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 181 |
7.5 - |
HIGH
Network |
Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an application crash, leading to … |
CWE-369
Divide By Zero |
CVE-2023-46849 | cpe:2.3:o:fedoraproject:fedora:39:* |
2024-11-21 17:29 2023-11-11 |
Show | GitHub Exploit DB Packet Storm | ||||
| 182 |
3.3 - |
LOW
Local |
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting. |
NVD-CWE-noinfo
|
CVE-2023-5543 | cpe:2.3:o:fedoraproject:fedora:38:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 183 |
3.3 - |
LOW
Local |
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. |
NVD-CWE-noinfo
|
CVE-2023-5551 | cpe:2.3:o:fedoraproject:fedora:38:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 184 |
5.3 - |
MEDIUM
Network |
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection. |
CWE-345
Insufficient Verification of Data Authenticity |
CVE-2023-5548 | cpe:2.3:o:fedoraproject:fedora:38:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 185 |
9.8 - |
CRITICAL
Network |
In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could uti… |
NVD-CWE-Other
|
CVE-2023-5550 | cpe:2.3:o:fedoraproject:fedora:38:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 186 |
5.3 - |
MEDIUM
Network |
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage. |
CWE-269
Improper Privilege Management |
CVE-2023-5549 | cpe:2.3:o:fedoraproject:fedora:38:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 187 |
6.1 - |
MEDIUM
Network |
The course upload preview contained an XSS risk for users uploading unsafe data. |
CWE-79
Cross-site Scripting |
CVE-2023-5547 |
cpe:2.3:o:fedoraproject:fedora:39:* cpe:2.3:o:fedoraproject:fedora:38:* cpe:2.3:o:fedoraproject:fedora:37:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 188 |
5.4 - |
MEDIUM
Network |
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. |
CWE-79
Cross-site Scripting |
CVE-2023-5546 |
cpe:2.3:o:fedoraproject:fedora:39:* cpe:2.3:o:fedoraproject:fedora:38:* cpe:2.3:o:fedoraproject:fedora:37:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 189 |
5.3 - |
MEDIUM
Network |
H5P metadata automatically populated the author with the user's username, which could be sensitive information. |
CWE-668
Exposure of Resource to Wrong Sphere |
CVE-2023-5545 | cpe:2.3:o:fedoraproject:fedora:38:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 190 |
5.4 - |
MEDIUM
Network |
Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk. |
CWE-79 CWE-639 Cross-site Scripting Authorization Bypass Through User-Controlled Key |
CVE-2023-5544 |
cpe:2.3:o:fedoraproject:fedora:39:* cpe:2.3:o:fedoraproject:fedora:38:* cpe:2.3:o:fedoraproject:fedora:37:* |
2024-11-21 17:41 2023-11-10 |
Show | GitHub Exploit DB Packet Storm |