PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 48

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 48 / 73

  1. CVE-2022-41317squid: exposure of sensitive information in cache manager
  2. CVE-2022-41222kernel: mm/mremap.c use-after-free vulnerability
  3. CVE-2022-41218kernel: Report vmalloc UAF in dvb-core/dmxdev
  4. CVE-2022-41032dotnet: Nuget cache poisoning on Linux via world-writable cache directory
  5. CVE-2022-40982hw: Intel: Gather Data Sampling (GDS) side channel vulnerability
  6. CVE-2022-40964hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi
  7. CVE-2022-40962Mozilla: Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
  8. CVE-2022-40960Mozilla: Data-race when parsing non-UTF-8 URLs in threads
  9. CVE-2022-40959Mozilla: Bypassing FeaturePolicy restrictions on transient pages
  10. CVE-2022-40958Mozilla: Bypassing Secure Context restriction for cookies with __Host and __Secure prefix
  11. CVE-2022-40957Mozilla: Incoherent instruction cache when building WASM on ARM64
  12. CVE-2022-40956Mozilla: Content-Security-Policy base-uri bypass
  13. CVE-2022-40899python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server
  14. CVE-2022-40898python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli
  15. CVE-2022-40897pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py
  16. CVE-2022-40896pygments: ReDoS in pygments
  17. CVE-2022-40768kernel: leak of sensitive information due to uninitialized data in stex_queuecommand_lck() in drivers/scsi/stex.c
  18. CVE-2022-40755jasper: Reachable assertion in inttobits, jas_image.c
  19. CVE-2022-40674expat: a use-after-free in the doContent function in xmlparse.c
  20. CVE-2022-40609JDK: unsafe deserialization flaw in the Object Request Broker (ORB)
  21. CVE-2022-40540kenrel: Memory corruption due to buffer copy in qcom_mdt_read_metadata
  22. CVE-2022-40476kernel: NULL pointer dereference issue in io_req_track_inflight in fs/io_uring.c
  23. CVE-2022-40433OpenJDK: segmentation fault in ciMethodBlocks
  24. CVE-2022-40318frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff
  25. CVE-2022-40307kernel: use-after-free in efi_capsule_write in capsule-loader.c
  26. CVE-2022-40304libxml2: dict corruption caused by entity reference cycles
  27. CVE-2022-40303libxml2: integer overflows with XML_PARSE_HUGE
  28. CVE-2022-40302frr: denial of service by crafting a BGP OPEN message with an option of type 0xff
  29. CVE-2022-40284NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image
  30. CVE-2022-40156xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
  31. CVE-2022-40155xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
  32. CVE-2022-40154xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
  33. CVE-2022-40153xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
  34. CVE-2022-40152woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks
  35. CVE-2022-40151xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks
  36. CVE-2022-40150jettison: memory exhaustion via user-supplied XML or JSON data
  37. CVE-2022-40149jettison: parser crash by stackoverflow
  38. CVE-2022-40133kernel: vmwgfx: use-after-free in vmw_execbuf_tie_context
  39. CVE-2022-40090libtiff: infinite loop via a crafted TIFF file
  40. CVE-2022-40023python-mako: REDoS in Lexer class
  41. CVE-2022-39958mod_security_crs: Small range header leading to response rule set bypass
  42. CVE-2022-39957mod_security_crs: Charset accept header field resulting in response rule set bypass
  43. CVE-2022-39956mod_security_crs: Content-Type or Content-Transfer-Encoding MIME header fields abuse
  44. CVE-2022-39955mod_security_crs: Multiple charsets defined in Content-Type header
  45. CVE-2022-39842Kernel: A type conflict of size_t versus int cause an integer overflow in pxa3xx_gcu_write
  46. CVE-2022-39410mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  47. CVE-2022-39408mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  48. CVE-2022-39400mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  49. CVE-2022-39399OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366)
  50. CVE-2022-39377sysstat: arithmetic overflow in allocate_structures() on 32 bit systems
CVE 2022 document archive — Page 48 | PulseLinux