Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Fedora Number Of NVD 5104 CRITICAL 454 HIGH 2277 MEDIUM 2202 LOW 170
URL https://getfedora.org/
Explanation Fedora is a Red Hat-supported distribution that actively embraces new technologies.

The Fedora Project releases a new version approximately every six months, and provides updated packages (which are maintained) for approximately 13 months.
This provides a mechanism for users to continue to receive package updates at any time, while allowing them to skip a release.

The above text is excerpted from [https://fedoraproject.org/wiki/Fedora_Release_Life_Cycle/ja].

Support is provided for one month (four weeks) after the release of two subsequent versions, roughly one year after the release.
Tag
  • Linux

Add Information URL
No Type Name URL
1 https://fedoraproject.org/wiki/Fedora_Release_Life_Cycle
2 https://fedoraproject.org/wiki/End_of_life
3 https://fedoraproject.org/wiki/Releases
4 https://getfedora.org/server/download/

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
4881 Fedora 40 40 April 23, 2024 Oct. 17, 2023 453 2278 2202 170
4882 Fedora 39 39 Oct. 17, 2023 Oct. 17, 2023 Nov. 12, 2024 27 140 138 8
4883 Fedora 38 38 April 18, 2023 April 18, 2023 May 14, 2024 32 224 240 16
4884 Fedora 37 37 Nov. 15, 2022 Nov. 15, 2022 Nov. 14, 2023 45 333 298 18
4885 Fedora 36 36 May 6, 2022 May 6, 2022 May 16, 2023 60 341 292 6
4886 Fedora 35 35 Nov. 2, 2021 Nov. 2, 2021 Dec. 13, 2022 91 572 411 21
4887 Fedora 34 34 April 27, 2021 April 27, 2021 June 7, 2022 93 597 461 28
4888 Fedora 34 34 April 20, 2021 April 20, 2021 June 7, 2022 93 597 461 28
4889 Fedora 33 33 Oct. 27, 2020 Oct. 27, 2020 Nov. 30, 2021 88 572 505 42
4890 Fedora 33 33 Oct. 24, 2020 Oct. 24, 2020 Nov. 30, 2021 88 572 505 42
4891 Fedora 32 32 April 28, 2020 April 28, 2020 May 25, 2021 86 388 458 39
4892 Fedora 32 32 April 25, 2020 April 25, 2020 May 25, 2021 86 388 458 39
4893 Fedora 31 31 Oct. 29, 2019 Oct. 29, 2019 Nov. 24, 2020 90 349 401 28
4894 Fedora 31 31 Oct. 25, 2019 Oct. 25, 2019 Nov. 24, 2020 90 349 401 28
4895 Fedora 30 30 May 7, 2019 May 7, 2019 May 26, 2020 88 310 313 18
4896 Fedora 30 30 May 7, 2019 May 7, 2019 May 26, 2020 88 310 313 18
4897 Fedora 29 29 Oct. 30, 2018 Oct. 30, 2018 Nov. 26, 2019 45 182 164 8
4898 Fedora 29 29 Oct. 30, 2018 Oct. 30, 2018 Nov. 26, 2019 45 182 164 8
4899 Fedora 28 28 May 1, 2018 May 1, 2018 May 28, 2019 12 58 34 2
4900 Fedora 28 28 May 1, 2018 May 1, 2018 May 28, 2019 12 58 34 2
4901 Fedora 27 27 Nov. 14, 2017 Nov. 14, 2017 Nov. 30, 2018 2 5 5 1
4902 Fedora 27 27 Oct. 24, 2017 Oct. 24, 2017 Nov. 30, 2018 2 5 5 1
4903 Fedora 26 26 July 11, 2017 July 11, 2017 May 29, 2018 3 7 5 1
4904 Fedora 25 25 Nov. 22, 2016 Nov. 22, 2016 Dec. 12, 2017 24 27 17 1
4905 Fedora 24 24 June 21, 2016 June 21, 2016 Aug. 8, 2017 33 50 26 1
4906 Fedora 23 23 Nov. 3, 2015 Nov. 3, 2015 Dec. 20, 2016 18 78 78 11
4907 Fedora 22 22 May 26, 2015 May 26, 2015 July 19, 2016 15 76 93 14
4908 Fedora 21 21 Dec. 9, 2014 Dec. 9, 2014 Dec. 1, 2015 4 64 84 10
4909 Fedora 20 20 Dec. 17, 2013 Dec. 17, 2013 June 23, 2015 14 60 95 16
4910 Fedora 19 19 July 2, 2013 July 2, 2013 Jan. 6, 2015 15 40 52 8
4911 Fedora 18 18 Jan. 15, 2013 Jan. 15, 2013 Jan. 14, 2014 11 20 33 4
4912 Fedora 17 17 May 29, 2012 May 29, 2012 July 30, 2013 3 18 33 4
4913 Fedora 16 16 Nov. 8, 2011 Nov. 8, 2011 Feb. 12, 2013 1 16 29 3
4914 Fedora 15 15 May 24, 2011 May 24, 2011 June 26, 2012 0 10 25 3
4915 Fedora 14 14 Nov. 2, 2010 Nov. 2, 2010 Dec. 9, 2011 1 11 15 0
4916 Fedora 13 13 May 25, 2010 May 25, 2010 June 24, 2011 5 15 25 2
4917 Fedora 12 12 Nov. 17, 2009 Nov. 17, 2009 Dec. 2, 2010 3 8 14 1
4918 Fedora 11 11 June 9, 2009 June 9, 2009 June 25, 2010 0 10 20 0
4919 Fedora 10 10 Nov. 25, 2008 Nov. 25, 2008 Dec. 17, 2009 0 13 13 4
4920 Fedora 9 9 May 13, 2008 May 13, 2008 July 10, 2009 2 15 16 1
4921 Fedora 8 8 Nov. 8, 2007 Nov. 8, 2007 Jan. 7, 2009 4 10 16 1
4922 Fedora 7 7 May 31, 2007 May 31, 2007 June 13, 2008 2 6 13 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
4881 -
5.0
MEDIUM The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. CWE-310
Cryptographic Issues
CVE-2013-6371 cpe:2.3:o:fedoraproject:fedora:20:* 2024-11-21 10:59
2014-04-22
Show GitHub Exploit DB Packet Storm
4882 -
5.0
MEDIUM Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6370 cpe:2.3:o:fedoraproject:fedora:20:* 2024-11-21 10:59
2014-04-22
Show GitHub Exploit DB Packet Storm
4883 -
4.0
MEDIUM The login form in Bugzilla 2.x, 3.x, 4.x before 4.4.3, and 4.5.x before 4.5.3 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authent… CWE-287
Improper Authentication
CVE-2014-1517 cpe:2.3:o:fedoraproject:fedora:20:*
cpe:2.3:o:fedoraproject:fedora:19:*
2024-11-21 11:04
2014-04-20
Show GitHub Exploit DB Packet Storm
4884 -
3.5
LOW channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when c… CWE-20
 Improper Input Validation 
CVE-2014-2287 cpe:2.3:o:fedoraproject:fedora:20:*
cpe:2.3:o:fedoraproject:fedora:19:*
2024-11-21 11:06
2014-04-19
Show GitHub Exploit DB Packet Storm
4885 -
7.5
HIGH main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote a… CWE-20
 Improper Input Validation 
CVE-2014-2286 cpe:2.3:o:fedoraproject:fedora:20:*
cpe:2.3:o:fedoraproject:fedora:19:*
2024-11-21 11:06
2014-04-19
Show GitHub Exploit DB Packet Storm
4886 -
5.8
MEDIUM The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the contain… CWE-59
Link Following
CVE-2013-6456 cpe:2.3:o:fedoraproject:fedora:20:* 2024-11-21 10:59
2014-04-16
Show GitHub Exploit DB Packet Storm
4887 -
4.0
MEDIUM Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denia… CWE-362
Race Condition
CVE-2010-5298 cpe:2.3:o:fedoraproject:fedora:20:*
cpe:2.3:o:fedoraproject:fedora:19:*
2024-11-21 10:22
2014-04-15
Show GitHub Exploit DB Packet Storm
4888 7.5
5.0
HIGH
Network
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process … CWE-125
Out-of-bounds Read
CVE-2014-0160 cpe:2.3:o:fedoraproject:fedora:20:*
cpe:2.3:o:fedoraproject:fedora:19:*
2026-04-22 05:07
2014-04-8
Show GitHub Exploit DB Packet Storm
4889 -
6.9
MEDIUM The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus messag… CWE-20
 Improper Input Validation 
CVE-2012-2095 cpe:2.3:o:fedoraproject:fedora:17:*
cpe:2.3:o:fedoraproject:fedora:16:*
cpe:2.3:o:fedoraproject:fedora:15:*
2024-11-21 10:38
2014-04-8
Show GitHub Exploit DB Packet Storm
4890 -
4.7
MEDIUM The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecifi… CWE-476
 NULL Pointer Dereference
CVE-2014-2678 cpe:2.3:o:fedoraproject:fedora:20:* 2024-11-21 11:06
2014-04-1
Show GitHub Exploit DB Packet Storm