Approved changes feed: RSS · Atom

cpe:2.3:a:fedora:fedora_37:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFedora (cc5047cc-3f3b-5aba-aa00-201317c93d68)
ProductFedora 37 (8d479e4e-28a0-549b-959b-c535d0a38551)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32665 vulnerable 2026-06-03 14:51:59.516600 Gvariant deserialisation does not match spec for non-normal data
MEDIUM (5.5)
A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Published: 2023-09-14T19:03:58.229Z
Updated: 2025-02-13T16:54:55.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32611 vulnerable 2026-06-03 14:51:59.362874 G_variant_byteswap() can take a long time with some non-normal inputs
MEDIUM (5.5)
A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.
Published: 2023-09-14T19:07:19.011Z
Updated: 2025-02-13T16:54:50.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29499 vulnerable 2026-06-03 14:51:41.153638 Gvariant offset table entry size is not checked in is_normal()
MEDIUM (5.5)
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
Published: 2023-09-14T19:06:17.810Z
Updated: 2025-12-18T15:23:36.882Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25588 not_vulnerable 2026-06-03 14:49:32.981553 Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
MEDIUM (4.7)
A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.
Published: 2023-09-14T20:47:16.974Z
Updated: 2025-02-13T16:44:33.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25586 not_vulnerable 2026-06-03 14:49:32.980803 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
Published: 2023-09-14T20:49:15.468Z
Updated: 2025-02-13T16:44:33.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25585 not_vulnerable 2026-06-03 14:49:32.978268 Field `file_table` of `struct module *module` is uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.
Published: 2023-09-14T20:50:09.526Z
Updated: 2025-02-13T16:44:32.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25584 not_vulnerable 2026-06-03 14:49:32.974072 Out of bounds read in parse_module function in bfd/vms-alpha.c
MEDIUM (6.3)
An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
Published: 2023-09-14T20:50:58.267Z
Updated: 2025-02-13T16:44:31.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.