Sign inStart freeBook a demo

Fedora vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Fedora has 7 published vulnerabilities across 4 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Directory Server, with 3. If you run Fedora software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Fedora products have the most vulnerabilities?

Directory Server leads with 3 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Directory Server3
  2. Pacemaker Configuration System2
  3. Newsx1
  4. Rpmdevtools1
Published vulnerabilities
Known exploited

Which Fedora vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Fedora's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Fedora flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 6.7%
    CVE-2008-3252Critical

    Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.

    CVSS10.0Published21 Jul 2008
  2. 6.6%
    CVE-2008-2930High

    Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search...

    CVSS7.1Published29 Aug 2008
  3. 2.9%
    CVE-2008-3283High

    Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a denial of service (memory consumption) via...

    CVSS7.8Published29 Aug 2008
  4. 2.4%
    CVE-2015-1848Medium

    The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission...

    CVSS6.8Published14 May 2015
  5. 2.1%
    CVE-2015-3983Medium

    The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to...

    CVSS4.3Published14 May 2015
  6. 1.7%
    CVE-2008-2929Medium

    Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7...

    CVSS4.3Published29 Aug 2008
  7. 0.3%
    CVE-2012-3500Low

    scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error...

    CVSS1.2Published1 Oct 2012
Every product

All Fedora products we track.

3 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 3 Fedora products with at least one tracked version, of 4 in our catalogue.

Precursor Intelligence

Running Fedora? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 7 published vulnerabilities across 4 products and 3 versions from Fedora.

None of Fedora's vulnerabilities is on the list of flaws known to be exploited today.

Directory Server, with 3 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Fedora products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring