PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 58

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 58 / 73

  1. CVE-2022-24959kernel: memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c
  2. CVE-2022-24958kernel: use-after-free in dev->buf release in drivers/usb/gadget/legacy/inode.c
  3. CVE-2022-24921golang: regexp: stack exhaustion via a deeply nested expression
  4. CVE-2022-24903rsyslog: Heap-based overflow in TCP syslog server
  5. CVE-2022-24883freerdp: Server Side Auth Against a SAM File May Succeed for Invalid Creds
  6. CVE-2022-24882freerdp: Server side NTLM does not properly check parameters
  7. CVE-2022-24834redis: heap overflow in the lua cjson and cmsgpack libraries
  8. CVE-2022-24812grafana: Privilege Escalation in grafana enterprise
  9. CVE-2022-24810net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
  10. CVE-2022-24809net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference.
  11. CVE-2022-24808net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  12. CVE-2022-24807net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access
  13. CVE-2022-24806net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously
  14. CVE-2022-24805net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  15. CVE-2022-24801python-twisted: possible http request smuggling
  16. CVE-2022-24795yajl: heap-based buffer overflow when handling large inputs due to an integer overflow
  17. CVE-2022-24785Moment.js: Path traversal in moment.locale
  18. CVE-2022-24773node-forge: Signature verification leniency in checking `DigestInfo` structure
  19. CVE-2022-24772node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery
  20. CVE-2022-24771node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery
  21. CVE-2022-24769moby: Default inheritable capabilities for linux container should be empty
  22. CVE-2022-24765git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree
  23. CVE-2022-24736redis: Malformed Lua script can crash Redis
  24. CVE-2022-24735redis: Code injection via Lua script execution environment
  25. CVE-2022-24724cmark-gfm: possible RCE due to integer overflow
  26. CVE-2022-24723urijs: Leading white space bypasses protocol validation
  27. CVE-2022-24713Mozilla: Denial of Service via complex regular expressions
  28. CVE-2022-24675golang: encoding/pem: fix stack overflow in Decode
  29. CVE-2022-24599audiofile: memory leak in printinfo.c
  30. CVE-2022-24512dotnet: double parser stack buffer overrun
  31. CVE-2022-24464dotnet: ASP.NET Denial of Service via FormPipeReader
  32. CVE-2022-24448kernel: nfs_atomic_open() returns uninitialized data instead of ENOTDIR
  33. CVE-2022-24436hw: cpu: cryptographic leaks via frequency scaling attacks(Intel)
  34. CVE-2022-24407cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands
  35. CVE-2022-24303python-pillow: temporary directory with a space character allows removal of unrelated file after im.show() and related actions
  36. CVE-2022-24302python-paramiko: Race condition in the write_private_key_file function
  37. CVE-2022-24130xterm: Buffer overflow in set_sixel in graphics_sixel.c
  38. CVE-2022-24122kernel: use-after-free and privilege escalation in kernel/ucount.c when unprivileged user namespaces are enabled
  39. CVE-2022-24070subversion: Subversion's mod_dav_svn is vulnerable to memory corruption
  40. CVE-2022-24052mariadb: CONNECT storage engine heap-based buffer overflow
  41. CVE-2022-24051mariadb: lack of proper validation of a user-supplied string before using it as a format specifier
  42. CVE-2022-24050mariadb: lack of validating the existence of an object prior to performing operations on the object
  43. CVE-2022-24048mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer
  44. CVE-2022-23990expat: integer overflow in the doProlog function
  45. CVE-2022-23960hw: cpu: arm64: Spectre-BHB
  46. CVE-2022-23959varnish: HTTP/1 request smuggling vulnerability
  47. CVE-2022-23943httpd: mod_sed: Read/write beyond bounds
  48. CVE-2022-23852expat: Integer overflow in function XML_GetBuffer
  49. CVE-2022-23829hw: amd: SPI protection feature may result in a potential arbitrary code execution.
  50. CVE-2022-23825hw: cpu: AMD: Branch Type Confusion (non-retbleed)
CVE 2022 document archive — Page 58 | PulseLinux