PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 51

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 51 / 73

  1. CVE-2022-35957grafana: Escalation from admin to server admin when auth proxy is used
  2. CVE-2022-35951redis: heap overflow in XAUTOCLAIM command's COUNT argument
  3. CVE-2022-35737sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API
  4. CVE-2022-35414QEMU: cputlb: uninitialized read during address translation leads to a crash
  5. CVE-2022-35260curl: .netrc parser out-of-bounds access
  6. CVE-2022-35256nodejs: HTTP Request Smuggling due to incorrect parsing of header fields
  7. CVE-2022-35255nodejs: weak randomness in WebCrypto keygen
  8. CVE-2022-35252curl: Incorrect handling of control code characters in cookies
  9. CVE-2022-35206binutils: NULL pointer dereference in read_and_display_attr_value() in dwarf.c
  10. CVE-2022-35205binutils: reachable assertion in display_debug_names() in dwarf.c
  11. CVE-2022-35020advancecomp: heap buffer overflow via the component inflate()
  12. CVE-2022-35019advancecomp: SEGV via invalid write memory access
  13. CVE-2022-35018advancecomp: SEGV via invalid read memory access
  14. CVE-2022-35017advancecomp: heap-buffer-overflow in mng_delta_addition() in mng.c
  15. CVE-2022-35016advancecomp: heap buffer overflow in data_dup() in data.cc
  16. CVE-2022-35015advancecomp: heap-buffer-overflow in le_uint32_read() in lib/endianrw.h
  17. CVE-2022-35014advancecomp: SEGV via invalid read address
  18. CVE-2022-34918kernel: heap overflow in nft_set_elem_init()
  19. CVE-2022-34903gpg: Signature spoofing via status line injection
  20. CVE-2022-34716dotnet: External Entity Injection during XML signature verification
  21. CVE-2022-34526libtiff: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit
  22. CVE-2022-34503qpdf: a heap buffer overflow via the function QPDF::processXRefStream
  23. CVE-2022-34495kernel: a double free in drivers/rpmsg/virtio_rpmsg_bus.c may lead to crash
  24. CVE-2022-34494kernel: a double free in drivers/rpmsg/virtio_rpmsg_bus.c
  25. CVE-2022-34484Mozilla: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  26. CVE-2022-34481Mozilla: Potential integer overflow in ReplaceElementsAt
  27. CVE-2022-34480firefox: Free of uninitialized pointer in lg_init
  28. CVE-2022-34479Mozilla: A popup window could be resized in a way to overlay the address bar with web content
  29. CVE-2022-34478Mozilla: Microsoft protocols can be attacked if a user accepts a prompt
  30. CVE-2022-34472Mozilla: Unavailable PAC file resulted in OCSP requests being blocked
  31. CVE-2022-34470Mozilla: Use-after-free in nsSHistory
  32. CVE-2022-34468Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI
  33. CVE-2022-34305tomcat: XSS in examples web application
  34. CVE-2022-34303shim: 3rd party shim allow secure boot bypass
  35. CVE-2022-34302shim: 3rd party shim allow secure boot bypass
  36. CVE-2022-34301shim: 3rd party shim allow secure boot bypass
  37. CVE-2022-34299libdwarf: heap buffer over-read in dwarf_global_formref_b() in dwarf_form.c
  38. CVE-2022-34169OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)
  39. CVE-2022-34038etcd: remote DoS via PageWriter.write
  40. CVE-2022-33987nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets
  41. CVE-2022-33981kernel: use-after-free in floppy driver may lead to a DoS
  42. CVE-2022-33972kernel: Intel firmware update for incorrect calculation in microcode keying mechanism
  43. CVE-2022-33743kernel: network backend may cause Linux netfront to use freed SKBs (XSA-405)
  44. CVE-2022-33196kernel: Intel firmware update for Incorrect default permissions in some memory controller configurations
  45. CVE-2022-33099lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling
  46. CVE-2022-33070protobuf-c: invalid arithmetic shift via the function parse_tag_and_wiretype may lead to DoS
  47. CVE-2022-33068harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc
  48. CVE-2022-33065libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS
  49. CVE-2022-33064libsndfile: off-by-one error in function wav_read_header in src/wav.c leads to code execution
  50. CVE-2022-32990gimp: unhandled exception via a crafted XCF file may lead to DoS
CVE 2022 document archive — Page 51 | PulseLinux