PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 46

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 46 / 73

  1. CVE-2022-45404Mozilla: Fullscreen notification bypass
  2. CVE-2022-45403Mozilla: Service Workers might have learned size of cross-origin media files
  3. CVE-2022-45143tomcat: JsonErrorReportValve injection
  4. CVE-2022-45142samba: fix introduced a logic inversion
  5. CVE-2022-45141samba: Samba AD DC using Heimdal can be forced to issue rc4-hmac encrypted Kerberos tickets
  6. CVE-2022-45061python: CPU denial of service via inefficient IDNA decoder
  7. CVE-2022-45060varnish: Request Forgery Vulnerability
  8. CVE-2022-45059varnish: Request Smuggling Vulnerability
  9. CVE-2022-44840binutils: heap-based buffer overflow in find_section_in_set() in readelf.c
  10. CVE-2022-44793net-snmp: NULL Pointer Exception when handling pv6IpForwarding
  11. CVE-2022-44792net-snmp: NULL Pointer Exception when handling ipDefaultTTL
  12. CVE-2022-44730batik: Server-Side Request Forgery vulnerability
  13. CVE-2022-44729batik: Server-Side Request Forgery vulnerability
  14. CVE-2022-44638pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write
  15. CVE-2022-44617libXpm: Runaway loop on width of 0 and enormous height
  16. CVE-2022-44370nasm: heap buffer overflow in quote_for_pmake() in asm/nasm.c
  17. CVE-2022-44369nasm: null pointer dereference in aout_add_gotoff_reloc() in output/outaout.c
  18. CVE-2022-44368nasm: null pointer dereference in obj_directive in output/outobj.c
  19. CVE-2022-44268ImageMagick: vulnerable to Information Disclosure when it parses a PNG image
  20. CVE-2022-44267ImageMagick: Denial of Service when it parses a PNG image
  21. CVE-2022-44034Kernel: A use-after-free due to race between scr24x_open() and scr24x_remove()
  22. CVE-2022-44033Kernel: A race condition between cm4040_open() and reader_detach() may result in UAF
  23. CVE-2022-44032Kernel: Race between cmm_open() and cm4000_detach() result in UAF
  24. CVE-2022-44020VirtualBMC: removes password protection from the managed libvirt XML domain
  25. CVE-2022-43995sudo: heap-based overflow with very small passwords
  26. CVE-2022-43945kernel: nfsd buffer overflow by RPC message over TCP with garbage data
  27. CVE-2022-43750kernel: memory corruption in usbmon driver
  28. CVE-2022-43681frr: out-of-bounds read exists in the BGP daemon of FRRouting
  29. CVE-2022-43680expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
  30. CVE-2022-43552curl: Use-after-free triggered by an HTTP proxy deny response
  31. CVE-2022-43551curl: HSTS bypass via IDN
  32. CVE-2022-43548nodejs: DNS rebinding in inspect via invalid octal IP address
  33. CVE-2022-42932Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4
  34. CVE-2022-42929Mozilla: Denial of Service via window.print
  35. CVE-2022-42928Mozilla: Memory Corruption in JS Engine
  36. CVE-2022-42927Mozilla: Same-origin policy violation could have leaked cross-origin URLs
  37. CVE-2022-42920Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing
  38. CVE-2022-42919python: local privilege escalation via the multiprocessing forkserver start method
  39. CVE-2022-42917frr: FRRouting FRR: Privilege escalation via TOCTOU race condition
  40. CVE-2022-42916curl: HSTS bypass via IDN
  41. CVE-2022-42915curl: HTTP proxy double-free
  42. CVE-2022-42898krb5: integer overflow vulnerabilities in PAC parsing
  43. CVE-2022-42896kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c
  44. CVE-2022-42895kernel: Information leak in l2cap_parse_conf_req in net/bluetooth/l2cap_core.c
  45. CVE-2022-42867webkitgtk: use-after-free issue leading to arbitrary code execution
  46. CVE-2022-42863webkitgtk: memory corruption issue leading to arbitrary code execution
  47. CVE-2022-42856webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution
  48. CVE-2022-42852webkitgtk: memory disclosure issue was addressed with improved memory handling
  49. CVE-2022-42826webkitgtk: use-after-free issue leading to arbitrary code execution
  50. CVE-2022-42824webkitgtk: sensitive information disclosure issue
CVE 2022 document archive — Page 46 | PulseLinux