PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 50

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 50 / 73

  1. CVE-2022-38090kernel: Intel firmware update for improper isolation of shared resources
  2. CVE-2022-38076hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
  3. CVE-2022-38023samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
  4. CVE-2022-37967samba: Kerberos constrained delegation ticket forgery possible against Samba AD DC
  5. CVE-2022-37866Ivy: Ivy Path traversal
  6. CVE-2022-37865apache-ivy: Directory Traversal
  7. CVE-2022-37708docker: vulnerable to Insecure Permissions
  8. CVE-2022-37705amanda: runtar: crafted arguments can lead to local privilege escalation
  9. CVE-2022-37704amanda: rundump: crafted arguments can lead to local privilege escalation
  10. CVE-2022-37703amanda: information leak (discovery of directory existence)
  11. CVE-2022-37660hostapd: Public Key Exchange (PKEX) Reuse Vulnerability in hostapd
  12. CVE-2022-37603loader-utils: Regular expression denial of service
  13. CVE-2022-37601loader-utils: prototype pollution in function parseQuery in parseQuery.js
  14. CVE-2022-37599loader-utils: regular expression denial of service in interpolateName.js
  15. CVE-2022-37598uglify-js: Prototype pollution vulnerability in function DEFNODE in ast.js
  16. CVE-2022-37454XKCP: buffer overflow in the SHA-3 reference implementation
  17. CVE-2022-37436httpd: mod_proxy: HTTP response splitting
  18. CVE-2022-37434zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field
  19. CVE-2022-37416libmpeg2: memcpy-param-overlap in function impeg2_mc_fullx_fully_8x8
  20. CVE-2022-37290nautilus: NULL pointer dereference via pasting crafted zip file
  21. CVE-2022-37052poppler: reachable assertion due to a failure in markObject()
  22. CVE-2022-37051poppler: abort in main() in pdfunite.cc
  23. CVE-2022-37050poppler: abort in PDFDoc::savePageAs in PDFDoc.c
  24. CVE-2022-37035frr: use-after-free bug due to race conditions in two threads
  25. CVE-2022-37032frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service
  26. CVE-2022-36946kernel: DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c
  27. CVE-2022-36944scala: deserialization gadget chain
  28. CVE-2022-36879kernel: xfrm_expand_policies() in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice
  29. CVE-2022-36765EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W
  30. CVE-2022-36764EDK2: heap buffer overflow in Tcg2MeasurePeImage()
  31. CVE-2022-36763EDK2: heap buffer overflow in Tcg2MeasureGptTable()
  32. CVE-2022-36760httpd: mod_proxy_ajp: Possible request smuggling
  33. CVE-2022-36648QEMU: rocker: NULL pointer dereference in of_dpa_cmd_add_l2_flood()
  34. CVE-2022-36440frr: Reachable assertion in peek_for_as4_capability function
  35. CVE-2022-36402kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c
  36. CVE-2022-36397hw: Intel: Incorrect default peinrmissions in QAT driver enable escalation of privilege
  37. CVE-2022-36369qatzip: local privilege escalation
  38. CVE-2022-36351hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
  39. CVE-2022-36319Mozilla: Mouse Position spoofing with CSS transforms
  40. CVE-2022-36318Mozilla: Directory indexes for bundled resources reflected URL parameters
  41. CVE-2022-36314Mozilla: Opening local .lnk files could cause unexpected network loads
  42. CVE-2022-36280kernel: vmwgfx: out-of-bounds write in vmw_kms_cursor_snoop
  43. CVE-2022-36227libarchive: NULL pointer dereference in archive_write.c
  44. CVE-2022-36123kernel: lacks a certain clear operation for the block starting symbol (.bss) cause a denial of service or gain privileges
  45. CVE-2022-36087python-oauthlib: DoS when attacker provides malicious IPV6 URI
  46. CVE-2022-36062grafana: Grafana RBAC folders/dashboards privilege escalation
  47. CVE-2022-36059Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack
  48. CVE-2022-36033jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if SafeList.preserveRelativeLinks is enabled
  49. CVE-2022-36021redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow
  50. CVE-2022-35977redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic
CVE 2022 document archive — Page 50 | PulseLinux