fedorahosted records
5 published records for vendor fedorahosted.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-399 Resource Management Errors1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
31Monitor | CVE-2009-2410No exploit | The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accountfedorahosted · sssd · CWE-287 | High7.5 | 1.9%Jul 30, 2009 |
18Monitor | CVE-2009-2905No exploit | Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crasfedorahosted · newt · CWE-119 | Medium4.6 | 0.4%Sep 29, 2009 |
17Monitor | CVE-2012-6097No exploit | File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstratefedorahosted · cronie · CWE-200 | Medium4.3 | 1.3%Apr 9, 2013 |
13Monitor | CVE-2010-0424No exploit | The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification fedorahosted · cronie · CWE-59 | Low3.3 | 0.3%Feb 25, 2010 |
8Monitor | CVE-2010-4341No exploit | The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users tofedorahosted · sssd · CWE-399 | Low2.1 | 0.4%Jan 24, 2011 |
- CVE-2009-241031Monitor
The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password account
HighCVSS 7.5No exploitEPSS 1%fedorahosted · sssdJul 30, 2009
- CVE-2009-290518Monitor
Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application cras
MediumCVSS 4.6No exploitEPSS 0%fedorahosted · newtSep 29, 2009
- CVE-2012-609717Monitor
File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrate
MediumCVSS 4.3No exploitEPSS 1%fedorahosted · cronieApr 9, 2013
- CVE-2010-042413Monitor
The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification
LowCVSS 3.3No exploitEPSS 0%fedorahosted · cronieFeb 25, 2010
- CVE-2010-43418Monitor
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to
LowCVSS 2.1No exploitEPSS 0%fedorahosted · sssdJan 24, 2011