PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 52

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 52 / 73

  1. CVE-2022-32981kernel: Linux kernel for powerpc 32-bit buffer overflow in ptrace PEEKUSER/POKEUSER
  2. CVE-2022-32933webkitgtk: A website may able to track visited websites in private browsing
  3. CVE-2022-32923webkitgtk: correctness issue in the JIT was addressed with improved checks
  4. CVE-2022-32919webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing.
  5. CVE-2022-32912webkitgtk: out-of-bounds read was addressed with improved bounds checking
  6. CVE-2022-32893webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution
  7. CVE-2022-32891webkitgtk: UI spoofing while Visiting a website that frames malicious content
  8. CVE-2022-32888webkitgtk: out-of-bounds write issue was addressed with improved bounds checking
  9. CVE-2022-32886webkitgtk: buffer overflow issue was addressed with improved memory handling
  10. CVE-2022-32885webkitgtk: Memory corruption issue when processing web content
  11. CVE-2022-32816webkitgtk: malicious content may lead to UI spoofing
  12. CVE-2022-32792webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  13. CVE-2022-32746samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request
  14. CVE-2022-32745samba: AD users can crash the server process with an LDAP add or modify request
  15. CVE-2022-32744samba: AD users can forge password change requests for any user
  16. CVE-2022-32743samba: Validated dnsHostname write right needs to be implemented
  17. CVE-2022-32742samba: server memory information leak via SMB1
  18. CVE-2022-32547ImageMagick: load of misaligned address at MagickCore/property.c
  19. CVE-2022-32546ImageMagick: outside the range of representable values of type 'unsigned long' at coders/pcl.c
  20. CVE-2022-32545ImageMagick: outside the range of representable values of type 'unsigned char' at coders/psd.c
  21. CVE-2022-32323autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c
  22. CVE-2022-32296kernel: insufficient TCP source port randomness leads to client identification
  23. CVE-2022-32275grafana: session control failure may lead to information disclosure
  24. CVE-2022-32250kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root
  25. CVE-2022-32231hw: Intel: Improper initialization in BIOS firmware may cause escalation privilege
  26. CVE-2022-32222nodejs: potential openssl.cnf hijack
  27. CVE-2022-32221curl: POST following PUT confusion
  28. CVE-2022-32215nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding
  29. CVE-2022-32214nodejs: HTTP request smuggling due to improper delimiting of header fields
  30. CVE-2022-32213nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding
  31. CVE-2022-32212nodejs: DNS rebinding in --inspect via invalid IP addresses
  32. CVE-2022-32208curl: FTP-KRB bad message verification
  33. CVE-2022-32207curl: Unpreserved file permissions
  34. CVE-2022-32206curl: HTTP compression denial of service
  35. CVE-2022-32205curl: Set-Cookie denial of service
  36. CVE-2022-32190golang: net/url: JoinPath does not strip relative path components in all circumstances
  37. CVE-2022-32189golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service
  38. CVE-2022-32166openvswitch: Heap buffer over-read in flow.c
  39. CVE-2022-32149golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags
  40. CVE-2022-32148golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  41. CVE-2022-32091mariadb: server crash in JOIN_CACHE::free or in copy_fields
  42. CVE-2022-32089mariadb: server crash in st_select_lex_unit::exclude_level
  43. CVE-2022-32088mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort
  44. CVE-2022-32087mariadb: server crash in Item_args::walk_args
  45. CVE-2022-32086mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT
  46. CVE-2022-32085mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor
  47. CVE-2022-32084mariadb: segmentation fault via the component sub_select
  48. CVE-2022-32083mariadb: server crash at Item_subselect::init_expr_cache_tracker
  49. CVE-2022-32082mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc
  50. CVE-2022-32081mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc
CVE 2022 document archive — Page 52 | PulseLinux