CVE 2022 document archive · 55
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
3,646 documents · Identifier year 2022 · 55 / 73
- CVE-2022-29117dotnet: malicious content causes high CPU and memory usage
- CVE-2022-29078ejs: server-side template injection in outputFunctionName
- CVE-2022-28893kernel: use after free in SUNRPC subsystem
- CVE-2022-28805lua: heap buffer overread
- CVE-2022-28796kernel: a use-after-free caused by a transaction_t race condition
- CVE-2022-28739ruby: Buffer overrun in String-to-Float conversion
- CVE-2022-28738Ruby: Double free in Regexp compilation
- CVE-2022-28737shim: Buffer overflow when loading crafted EFI images
- CVE-2022-28736grub2: use-after-free in grub_cmd_chainloader()
- CVE-2022-28735grub2: shim_lock verifier allows non-kernel files to be loaded
- CVE-2022-28734grub2: Out-of-bound write when handling split HTTP headers
- CVE-2022-28733grub2: Integer underflow in grub_net_recv_ip4_packets
- CVE-2022-28693hw: cpu: Intel: information disclosure via local access
- CVE-2022-28615httpd: Out-of-bounds read in ap_strcmp_match()
- CVE-2022-28614httpd: Out-of-bounds read via ap_rwrite()
- CVE-2022-28506giflib: buffer overflow in function DumpScreen2RGB()
- CVE-2022-28463ImageMagick: heap-buffer-overflow in PushLongPixel() of quantum-private.h
- CVE-2022-28390kernel: double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c
- CVE-2022-28389kernel: a double free in mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c
- CVE-2022-28388kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c
- CVE-2022-28356kernel: refcount leak in llc_ui_bind and llc_ui_autobind
- CVE-2022-28330httpd: mod_isapi: out-of-bounds read
- CVE-2022-28327golang: crypto/elliptic: panic caused by oversized scalar
- CVE-2022-28321pam: authentication bypass for SSH logins
- CVE-2022-28289Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8
- CVE-2022-28286Mozilla: iframe contents could be rendered outside the border
- CVE-2022-28285Mozilla: Incorrect AliasSet used in JIT Codegen
- CVE-2022-28282Mozilla: Use-after-free in DocumentL10n::TranslateDocument
- CVE-2022-28281Mozilla: Out of bounds write due to unexpected WebAuthN Extensions
- CVE-2022-28199dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service
- CVE-2022-28131golang: encoding/xml: stack exhaustion in Decoder.Skip
- CVE-2022-28109selenium-standalone: DNS-rebinding vulnerability
- CVE-2022-28048stb: integer shift of invalid size in stbi__jpeg_decode_block_prog_ac()
- CVE-2022-28042stb: use-after-free in stbi__jpeg_huff_decode()
- CVE-2022-28041stb: integer overflow in stbi__jpeg_decode_block_prog_dc() can lead to DoS
- CVE-2022-27950kernel: memory leak in drivers/hid/hid-elo.c
- CVE-2022-27943binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
- CVE-2022-27782curl: TLS and SSH connection too eager reuse
- CVE-2022-27781curl: CERTINFO never-ending busy-loop
- CVE-2022-27780curl: percent-encoded path separator in URL host
- CVE-2022-27779curl: cookie for trailing dot TLD
- CVE-2022-27778curl: removes wrong file on error
- CVE-2022-27776curl: auth/cookie leak on redirect
- CVE-2022-27775curl: bad local IPv6 connection reuse
- CVE-2022-27774curl: credential leak on redirect
- CVE-2022-27672kernel: AMD: Cross-Thread Return Address Predictions
- CVE-2022-27666kernel: buffer overflow in IPsec ESP transformation code
- CVE-2022-27664golang: net/http: handle server errors after sending GOAWAY
- CVE-2022-27651buildah: Default inheritable capabilities for linux container should be empty
- CVE-2022-27650crun: Default inheritable capabilities for linux container should be empty