[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiFWOcWbsqr2eciOpbfExwWg1va_wi_9YzuySaXvbrYs":3,"g5a-family:fedoraproject\u002Fextra_packages_for_enterprise_linux":118,"g5a-ex:fedoraproject\u002Fextra_packages_for_enterprise_linux@*":119},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":90,"seoMetadata":96,"meta":115},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"fedoraproject","extra_packages_for_enterprise_linux",3,76,1,"2024-01-16",[14,19,22],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"7.0",34,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"8.0",52,{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},"9.0",7,"Extra Packages For Enterprise Linux by Fedoraproject is a technology product with 3 tracked versions and 76 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},[31,39,46,53,59,64,69,75,80,85],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":4,"epssScore":38},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",8.8,"v3.1","High",0.70833,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":45},"CVE-2023-34152","A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.","2023-05-30",9.8,"Critical",0.08011,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":36,"severity":51,"isKev":18,"epssScore":52},"CVE-2023-30943","The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.","2023-05-02",5.3,"Medium",0.06828,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":58},"CVE-2020-9274","An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the *lookup_alias(const char alias) or print_aliases(void) function is called, they fail to correctly detect the end of the linked list and try to access a non-existent list member. This is related to init_aliases in diraliases.c.","2020-02-26",7.5,0.06006,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":57,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":63},"CVE-2022-21698","client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`; not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our middleware; and not have any firewall\u002FLB\u002Fproxy that filters away requests with unknown `method`. client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including removing the `method` label name from counter\u002Fgauge used in the InstrumentHandler; turning off affected promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow a limited set of methods.","2022-02-15",0.05994,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":43,"cvssVersion":36,"severity":44,"isKev":18,"epssScore":68},"CVE-2022-25648","The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.","2022-04-19",0.04912,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":36,"severity":51,"isKev":18,"epssScore":74},"CVE-2021-3733","There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.","2022-03-10",6.5,0.04799,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":57,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":79},"CVE-2022-28327","The generic P-256 feature in crypto\u002Felliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.","2022-04-20",0.0416,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":57,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":84},"CVE-2022-27191","The golang.org\u002Fx\u002Fcrypto\u002Fssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.","2022-03-18",0.03931,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":57,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":89},"CVE-2021-23727","This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.","2021-12-29",0.03877,[91],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"severity":37,"isKev":4,"epssScore":38,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"WebRTC Heap Buffer Overflow Vulnerability","2022-08-25","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.","Apply updates per vendor instructions.",{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Extra Packages For Enterprise Linux by Fedoraproject - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Extra Packages For Enterprise Linux by Fedoraproject covering 3 versions with 76 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Extra Packages For Enterprise Linux vulnerabilities, Extra Packages For Enterprise Linux security, Extra Packages For Enterprise Linux CVE, Fedoraproject Extra Packages For Enterprise Linux, Extra Packages For Enterprise Linux threat intelligence, Fedoraproject security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Extra Packages For Enterprise Linux KEV, Extra Packages For Enterprise Linux exploited vulnerabilities",{"@context":101,"@type":102,"name":103,"description":98,"url":104,"manufacturer":105,"applicationCategory":109,"softwareVersion":110,"mainEntity":111},"https:\u002F\u002Fschema.org","SoftwareApplication","Extra Packages For Enterprise Linux","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ffedoraproject\u002Fextra_packages_for_enterprise_linux",{"@type":106,"name":107,"url":108},"Organization","Fedoraproject","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffedoraproject","Security Software","3 versions tracked",{"@type":112,"name":113,"description":114,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Extra Packages For Enterprise Linux Security Vulnerabilities","Security vulnerabilities affecting Extra Packages For Enterprise Linux by Fedoraproject",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":116,"apiVersion":117},"2026-10-17T04:08:36.416Z","3.0",[],{"rows":120,"total":11,"capped":18,"failed":17},[121],{"cveId":32,"name":92,"severity":37,"cvss":35,"added":93,"epss":38,"published":122,"ranges":123,"checked":4,"hits":124,"covers":18},"2022-07-28T02:15:07.797",[20],[]]