PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 47

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 47 / 73

  1. CVE-2022-42823webkitgtk: type confusion issue leading to arbitrary code execution
  2. CVE-2022-42799webkitgtk: issue was addressed with improved UI handling
  3. CVE-2022-42722kernel: Denial of service in beacon protection for P2P-device
  4. CVE-2022-42721kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c
  5. CVE-2022-42720kernel: use-after-free in bss_ref_get in net/wireless/scan.c
  6. CVE-2022-42719kernel: A use-after-free problem observed in multi-BSSID element when parsing
  7. CVE-2022-42703kernel: use-after-free related to leaf anon_vma double reuse
  8. CVE-2022-42432kernel: netfilter: nfnetlink_osf: uninitialized variable information disclosure vulnerability
  9. CVE-2022-42329kernel: Xen Security Advisory 424 v1: guests can trigger deadlock in Linux netback driver
  10. CVE-2022-42328kernel: Xen Security Advisory 424 v1: guests can trigger deadlock in Linux netback driver
  11. CVE-2022-42252tomcat: request smuggling
  12. CVE-2022-42012dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly
  13. CVE-2022-42011dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type
  14. CVE-2022-42010dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets
  15. CVE-2022-42004jackson-databind: use of deeply nested arrays
  16. CVE-2022-42003jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS
  17. CVE-2022-41974device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket
  18. CVE-2022-41973device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack
  19. CVE-2022-41966xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow
  20. CVE-2022-41946postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
  21. CVE-2022-41912crewjam/saml: Authentication bypass when processing SAML responses containing multiple Assertion elements
  22. CVE-2022-41903git: Heap overflow in `git archive`, `git log --format` leading to RCE
  23. CVE-2022-41877freerdp: missing input length validation in `drive` channel
  24. CVE-2022-41862postgresql: Client memory disclosure when connecting with Kerberos to modified server
  25. CVE-2022-41861freeradius: Crash on invalid abinary data
  26. CVE-2022-41860freeradius: Crash on unknown option in EAP-SIM
  27. CVE-2022-41859freeradius: Information leakage in EAP-PWD
  28. CVE-2022-41858kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip
  29. CVE-2022-41854dev-java/snakeyaml: DoS via stack overflow
  30. CVE-2022-41853hsqldb: Untrusted input may lead to RCE attack
  31. CVE-2022-41852JXPath: untrusted XPath expressions may lead to RCE attack
  32. CVE-2022-41850kernel: Race condition in roccat_report_event in drivers/hid/hid-roccat.c
  33. CVE-2022-41849Kernel: A race between ufx_ops_open() and ufx_usb_disconnect() may result in UAF
  34. CVE-2022-41848kernel: Race condition between mgslpc_ioctl and mgslpc_detach
  35. CVE-2022-41808hw: Intel: improper buffer restriction may allow an authenticated user to potentially enable denial of service via local access
  36. CVE-2022-41804hw: Intel: Unauthorized error injection in Intel SGX or Intel TDX
  37. CVE-2022-41742nginx: Memory disclosure in the ngx_http_mp4_module
  38. CVE-2022-41741nginx: Memory corruption in the ngx_http_mp4_module
  39. CVE-2022-41725golang: net/http, mime/multipart: denial of service from excessive resource consumption
  40. CVE-2022-41724golang: crypto/tls: large handshake records may cause panics
  41. CVE-2022-41723golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding
  42. CVE-2022-41722golang: path/filepath: path-filepath filepath.Clean path traversal
  43. CVE-2022-41721x/net/http2/h2c: request smuggling
  44. CVE-2022-41720golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  45. CVE-2022-41717golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests
  46. CVE-2022-41715golang: regexp/syntax: limit memory used by parsing regexps
  47. CVE-2022-41674kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans()
  48. CVE-2022-41420nasm: stack-based buffer overflow in the ndisasm component
  49. CVE-2022-41409pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop
  50. CVE-2022-41318squid: buffer-over-read in SSPI and SMB authentication
CVE 2022 document archive — Page 47 | PulseLinux