Approved changes feed: RSS · Atom

cpe:2.3:a:fedora:fedora_37:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFedora (cc5047cc-3f3b-5aba-aa00-201317c93d68)
ProductFedora 37 (8d479e4e-28a0-549b-959b-c535d0a38551)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32665 vulnerable 2026-06-08 06:04:46.742506 Gvariant deserialisation does not match spec for non-normal data
MEDIUM (5.5)
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Published: 2023-09-14T19:03:58.229Z
Updated: 2025-02-13T16:54:55.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32611 vulnerable 2026-06-08 06:04:46.600107 G_variant_byteswap() can take a long time with some non-normal inputs
MEDIUM (5.5)
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Published: 2023-09-14T19:07:19.011Z
Updated: 2026-06-23T17:19:08.854Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29499 vulnerable 2026-06-08 06:02:40.387698 Gvariant offset table entry size is not checked in is_normal()
MEDIUM (5.5)
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
Published: 2023-09-14T19:06:17.810Z
Updated: 2025-12-18T15:23:36.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25588 not_vulnerable 2026-06-08 05:56:09.304865 Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
MEDIUM (4.7)
A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.
Published: 2023-09-14T20:47:16.974Z
Updated: 2025-02-13T16:44:33.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25586 not_vulnerable 2026-06-08 05:56:09.303974 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
Published: 2023-09-14T20:49:15.468Z
Updated: 2025-02-13T16:44:33.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25585 not_vulnerable 2026-06-08 05:56:09.301333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25584 not_vulnerable 2026-06-08 05:56:09.296274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.