Extra Packages For Enterprise Linux 7
Approved changes feed: RSS · Atom
cpe:2.3:a:fedora:extra_packages_for_enterprise_linux_7:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fedora (cc5047cc-3f3b-5aba-aa00-201317c93d68) |
|---|---|
| Product | Extra Packages For Enterprise Linux 7 (a1e4ff86-91c0-5969-98d3-a7cf3fa960cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3603 |
not_vulnerable | 2026-06-03 14:52:41.290291 |
Processing sftp server read may cause null dereference
LOW (3.1)
A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticated user's sftp server connection (if implemented as forking as recommended). For thread-based servers, this might also cause DoS for legitimate users.
Given this code is not in any released versions, no security releases have been issued.
Published: 2023-07-21T19:09:44.083Z
Updated: 2024-09-26T20:04:43.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25588 |
not_vulnerable | 2026-06-03 14:49:32.981618 |
Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
MEDIUM (4.7)
A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.
Published: 2023-09-14T20:47:16.974Z
Updated: 2025-02-13T16:44:33.622Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25586 |
not_vulnerable | 2026-06-03 14:49:32.980824 |
Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
Published: 2023-09-14T20:49:15.468Z
Updated: 2025-02-13T16:44:33.064Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25585 |
not_vulnerable | 2026-06-03 14:49:32.978336 |
Field `file_table` of `struct module *module` is uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.
Published: 2023-09-14T20:50:09.526Z
Updated: 2025-02-13T16:44:32.455Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25584 |
not_vulnerable | 2026-06-03 14:49:32.976983 |
Out of bounds read in parse_module function in bfd/vms-alpha.c
MEDIUM (6.3)
An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
Published: 2023-09-14T20:50:58.267Z
Updated: 2025-02-13T16:44:31.939Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.