# Fedoraproject Extra Packages for Enterprise Linux


- [CVE-2022-2294](https://insights.sbomify.com/CVE-2022-2294/): WebRTC Heap Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2023-34152](https://insights.sbomify.com/CVE-2023-34152/): Command injection in ImageMagick (critical 9.8)
- [CVE-2022-4170](https://insights.sbomify.com/CVE-2022-4170/): Code injection in rxvt-unicode (critical 9.8)
- [CVE-2022-40315](https://insights.sbomify.com/CVE-2022-40315/): Moodle Minor SQL injection risk in admin user browsing (critical 9.8)
- [CVE-2022-45152](https://insights.sbomify.com/CVE-2022-45152/): Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library (critical 9.1)
- [CVE-2022-24882](https://insights.sbomify.com/CVE-2022-24882/): Server side NTLM does not properly check parameters in FreeRDP (critical 9.1)
- [CVE-2021-45079](https://insights.sbomify.com/CVE-2021-45079/): Auth bypass in n/a (critical 9.1)
- [CVE-2022-2158](https://insights.sbomify.com/CVE-2022-2158/): Use after free in Chrome (high 8.8)
- [CVE-2022-2163](https://insights.sbomify.com/CVE-2022-2163/): Use after free in Chrome (high 8.8)
- [CVE-2022-2295](https://insights.sbomify.com/CVE-2022-2295/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-2296](https://insights.sbomify.com/CVE-2022-2296/): Use after free in Chrome (high 8.8)
- [CVE-2022-0983](https://insights.sbomify.com/CVE-2022-0983/): SQL Injection in Moodle (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/fedoraproject/extra-packages-for-enterprise-linux/