CVE Tools
Track your stack

Dnf

7 CVEs tracked since 2018. Since Dec 2018, none of them reached CISA KEV.

Dnf CVEs per month

Dec 2018 to Sep 2021. Point at a month, or focus the strip and use the arrow keys.
Dnf CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-1230
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-0940

Products

The products that kept showing up in Dnf's monthly top three, with their CVEs summed over those months.

  1. Libsolv72 months

Latest CVEs

The 9 most recently published vulnerabilities affecting Dnf.

  1. CVE-2021-44568Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), wh...6.5
  2. CVE-2021-33938Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.7.5
  3. CVE-2021-33930Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.7.5
  4. CVE-2021-33929Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.7.5
  5. CVE-2021-33928Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.7.5
  6. CVE-2021-3200Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase...3.3
  7. CVE-2018-20533There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.6.5
  8. CVE-2018-20532There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.6.5
  9. CVE-2018-20534There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects...6.5

The record

Peak rank
#109 in Sep 2021
Busiest month shown
Sep 2021, 4 CVEs
Months with a KEV entry
0 since Dec 2018
Monthly snapshots
2 since 2018
Dnf's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store