[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3I6EaC3rt5jXipBR1oUpDoxQ7ddIdb51Y3hE3qG3FRw":3,"g5a-ex:redhat\u002Ffedora@*":131,"g5a-family:redhat\u002Ffedora":133},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":47,"kevVulnerabilities":108,"seoMetadata":109,"meta":128},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"redhat","fedora",8,27,0,"2018-11-09",[14,18,21,24,26,28,31,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10",5,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"12",2,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"13",1,{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},"14",{"version":27,"cve_count":20,"kev_count":11,"has_kev":17},"6",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"7",14,{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"8",15,{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},"9",6,"Fedora by Redhat is a technology product with 8 tracked versions and 27 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45,46],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},{"version":27,"cve_count":20,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},[48,56,63,70,76,81,86,92,97,102],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":55},"CVE-2007-5962","Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.","2008-05-22",7.1,"v2","High",0.12061,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":53,"severity":61,"isKev":17,"epssScore":62},"CVE-2008-0073","Array index error in the sdpplin_parse function in input\u002Flibreal\u002Fsdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter.","2008-03-24",6.8,"Medium",0.09255,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":53,"severity":68,"isKev":17,"epssScore":69},"CVE-2008-3252","Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.","2008-07-21",10,"Critical",0.06654,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":53,"severity":68,"isKev":17,"epssScore":75},"CVE-2008-0668","The excel_read_HLINK function in plugins\u002Fexcel\u002Fms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow.  NOTE: some of these details are obtained from third party information.","2008-02-11",9.3,0.04981,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":60,"cvssVersion":53,"severity":61,"isKev":17,"epssScore":80},"CVE-2008-1552","The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow.  NOTE: the researcher describes this as an integer overflow, but CVE uses the \"underflow\" term in cases of wraparound from unsigned subtraction.","2008-03-31",0.04105,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":60,"cvssVersion":53,"severity":61,"isKev":17,"epssScore":85},"CVE-2007-4134","Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain \u002F\u002F.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.","2007-08-30",0.03009,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":91},"CVE-2008-0932","diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.","2008-02-25",7.5,0.02901,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":16,"cvssVersion":53,"severity":61,"isKev":17,"epssScore":96},"CVE-2007-6284","The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences.","2008-01-12",0.02566,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":16,"cvssVersion":53,"severity":61,"isKev":17,"epssScore":101},"CVE-2010-4695","A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on Fedora 12 and gif2png_2.5.2-1 on Debian GNU\u002FLinux, truncates a GIF pathname specified on the command line, which might allow remote attackers to create PNG files in unintended directories via a crafted command-line argument, as demonstrated by a CGI program that launches gif2png, a different vulnerability than CVE-2009-5018.","2011-01-14",0.02445,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":107},"CVE-2008-6560","Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.","2009-03-31",7.8,0.02314,[],{"title":110,"metaDescription":111,"keywords":112,"structuredData":113},"Fedora by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Fedora by Redhat covering 8 versions with 27 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Fedora vulnerabilities, Fedora security, Fedora CVE, Redhat Fedora, Fedora threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":114,"@type":115,"name":116,"description":111,"url":117,"manufacturer":118,"applicationCategory":122,"softwareVersion":123,"mainEntity":124},"https:\u002F\u002Fschema.org","SoftwareApplication","Fedora","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Ffedora",{"@type":119,"name":120,"url":121},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","8 versions tracked",{"@type":125,"name":126,"description":127,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Fedora Security Vulnerabilities","Security vulnerabilities affecting Fedora by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":129,"apiVersion":130},"2026-10-18T18:55:30.578Z","3.0",{"rows":132,"total":11,"capped":17,"failed":11},[],[134,137,139,141],{"product":135,"cves":136},"fedora_core",81,{"product":138,"cves":20},"fedora_8",{"product":140,"cves":20},"fedora_directory_server",{"product":142,"cves":23},"fedora_coreos"]