Latest critical severity vulnerabilities for "fedoraproject fedora" 25

Where

AND

Sort:

composer/zendframework/zendframeworkSQL Injection

Risk 87

Severity

9.8

SQL Injection

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The (1) order and (2) group methods in ZendDbSelect in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.

First published (updated )

CVE-2016-4861

Fedoraproject FedoraInteger Overflow, Buffer Overflow

Risk 87

Severity

9.8

Integer Overflow, Buffer Overflow

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

It was found that vncconnectionservermessage() and vnccolormapset() functions do not check for integer overflow properly, leading to a malicious server being able to overwrite parts of the client memory, possibly leading to remote code execution under privileges of user running the VNC client.

Upstream bug:

https://bugzilla.gnome.org/showbug.cgi?id=778050

Upstream patch:

https://git.gnome.org/browse/gtk-vnc/commit/?id=c8583fd3783c5b811590

1 / 2

Source: Red Hat

First published (updated )

CVE-2017-5885

Fedoraproject FedoraBuffer Overflow

Risk 86

Severity

9.8

Buffer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 2

Source: Ubuntu

First published (updated )

CVE-2016-2090

maven/org.jenkins-ci.main:jenkins-coreThe remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute …

Risk 89

Severity

9.8

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.

First published (updated )

CVE-2016-9299