PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 54

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 54 / 73

  1. CVE-2022-30631golang: compress/gzip: stack exhaustion in Reader.Read
  2. CVE-2022-30630golang: io/fs: stack exhaustion in Glob
  3. CVE-2022-30629golang: crypto/tls: session tickets lack random ticket_age_add
  4. CVE-2022-30595python-pillow: heap buffer overflow in crafted TGA file
  5. CVE-2022-30594kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option
  6. CVE-2022-30580golang: os/exec: Code injection in Cmd.Start
  7. CVE-2022-30556httpd: mod_lua: Information disclosure with websockets
  8. CVE-2022-30550dovecot: Privilege escalation when similar master and non-master passdbs are used
  9. CVE-2022-30539hw: Intel: Use after free in the BIOS firmware may cause escalation of privilege
  10. CVE-2022-30522httpd: mod_sed: DoS vulnerability
  11. CVE-2022-30339hw: Intel: Out-of-bounds read in firmware for Integrated Sensor Solution
  12. CVE-2022-30294webkitgtk: heap-buffer-overflow in WebCore::TextureMapperLayer::setContentsLayer
  13. CVE-2022-30293webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution
  14. CVE-2022-30123rubygem-rack: crafted requests can cause shell escape sequences
  15. CVE-2022-30122rubygem-rack: crafted multipart POST request may cause a DoS
  16. CVE-2022-30115curl: HSTS bypass via trailing dot
  17. CVE-2022-30067gimp: buffer overflow through a crafted XCF file
  18. CVE-2022-29970sinatra: path traversal possible outside of public_dir when serving static files
  19. CVE-2022-29968kernel: io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private
  20. CVE-2022-29917Mozilla: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
  21. CVE-2022-29916Mozilla: Leaking browser history with CSS variables
  22. CVE-2022-29914Mozilla: Fullscreen notification bypass using popups
  23. CVE-2022-29913Mozilla: Speech Synthesis feature not properly disabled
  24. CVE-2022-29912Mozilla: Reader mode bypassed SameSite cookies
  25. CVE-2022-29911Mozilla: iframe Sandbox bypass
  26. CVE-2022-29909Mozilla: Bypassing permission prompt in nested browsing contexts
  27. CVE-2022-29901hw: cpu: Intel: RetBleed Arbitrary Speculative Code Execution with Return Instructions
  28. CVE-2022-29900hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions
  29. CVE-2022-29885tomcat: EncryptInterceptor documentation mistake
  30. CVE-2022-29869cifs-utils: crafted input may cause an information leak
  31. CVE-2022-29824libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write
  32. CVE-2022-29800networkd-dispatcher: Time-of-check-time-of-use (TOCTOU) race condition
  33. CVE-2022-29799networkd-dispatcher: Directory traversal
  34. CVE-2022-29654nasm: heap-based buffer overflow in quote_for_pmake() in asm/nasm.c
  35. CVE-2022-29599maven-shared-utils: Command injection via Commandline class
  36. CVE-2022-29582kernel: Race condition that allows container escape to system root
  37. CVE-2022-29581kernel: use-after-free due to improper update of reference count in net/sched/cls_u32.c
  38. CVE-2022-29526golang: syscall: faccessat checks wrong group
  39. CVE-2022-29458ncurses: segfaulting OOB read
  40. CVE-2022-29404httpd: mod_lua: DoS in r:parsebody
  41. CVE-2022-29361python-Werkzeug: HTTP Request Smuggling
  42. CVE-2022-29244nodejs: npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace
  43. CVE-2022-29217python-jwt: Key confusion through non-blocklisted public key formats
  44. CVE-2022-29187git: Bypass of safe.directory protections
  45. CVE-2022-29167hawk: REDoS in hawk.utils.parseHost() when parsing Host header
  46. CVE-2022-29162runc: incorrect handling of inheritable capabilities
  47. CVE-2022-29156kernel: rtrs-clt.c rtrs_clt_dev_release double free
  48. CVE-2022-29155openldap: OpenLDAP SQL injection
  49. CVE-2022-29154rsync: remote arbitrary files write inside the directories of connecting peers
  50. CVE-2022-29145dotnet: parsing HTML causes Denial of Service
CVE 2022 document archive — Page 54 | PulseLinux