PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 59

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 59 / 73

  1. CVE-2022-23824hw: cpu: AMD: IBPB and Return Address Predictor Interactions
  2. CVE-2022-23823hw: cpu: cryptographic leaks via frequency scaling attacks(AMD)
  3. CVE-2022-23816hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions
  4. CVE-2022-23814Kernel: AMD Server Vulnerabilities due to failure of address by software to BIOS commands
  5. CVE-2022-23813Kernel: AMD Server Vulnerabilities in SNP memory enforcement policy
  6. CVE-2022-23806golang: crypto/elliptic: IsOnCurve returns true for invalid field elements
  7. CVE-2022-23773golang: cmd/go: misinterpretation of branch names can lead to incorrect access control
  8. CVE-2022-23772golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString
  9. CVE-2022-23712elasticsearch: DoS via a specifically formatted network request
  10. CVE-2022-23647prismjs: improperly escaped output allows a XSS
  11. CVE-2022-23645swtpm: Unchecked header size indicator against expected size
  12. CVE-2022-23552grafana: persistent xss in grafana core plugins
  13. CVE-2022-23536cortex: Alertmanager can expose local files content via specially crafted config
  14. CVE-2022-23527mod_auth_openidc: Open Redirect in oidc_validate_redirect_url() using tab character
  15. CVE-2022-23521git: gitattributes parsing integer overflow
  16. CVE-2022-23498grafana: Use of Cache Containing Sensitive Information
  17. CVE-2022-23437xerces-j2: infinite loop when handling specially crafted XML document payloads
  18. CVE-2022-23308libxml2: Use-after-free of ID and IDREF attributes
  19. CVE-2022-23307log4j: Unsafe deserialization flaw in Chainsaw log viewer
  20. CVE-2022-23305log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender
  21. CVE-2022-23304wpa_supplicant: EAP-pwd side-channel attacks as a result of cache access patterns
  22. CVE-2022-23303wpa_supplicant: SAE side channel attacks as a result of cache access patterns
  23. CVE-2022-23302log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink
  24. CVE-2022-23267dotnet: excess memory allocation via HttpClient causes DoS
  25. CVE-2022-23222kernel: local privileges escalation in kernel/bpf/verifier.c
  26. CVE-2022-23219glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname
  27. CVE-2022-23218glibc: Stack-based buffer overflow in svcunix_create via long pathnames
  28. CVE-2022-23181tomcat: local privilege escalation vulnerability
  29. CVE-2022-23094libreswan: Malicious IKEv1 packet can cause libreswan to restart
  30. CVE-2022-22942kernel: failing usercopy allows for use-after-free exploitation
  31. CVE-2022-22844libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c
  32. CVE-2022-22827expat: Integer overflow in storeAtts in xmlparse.c
  33. CVE-2022-22826expat: Integer overflow in nextScaffoldPart in xmlparse.c
  34. CVE-2022-22825expat: Integer overflow in lookup in xmlparse.c
  35. CVE-2022-22824expat: Expat: Denial of service and memory issues due to integer overflow
  36. CVE-2022-22823expat: Expat: Denial of Service vulnerability in XML parsing
  37. CVE-2022-22822expat: Integer overflow in addBinding in xmlparse.c
  38. CVE-2022-22817python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions
  39. CVE-2022-22816python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c
  40. CVE-2022-22815python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c
  41. CVE-2022-22764Mozilla: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6
  42. CVE-2022-22763Mozilla: Script Execution during invalid object state
  43. CVE-2022-22761Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
  44. CVE-2022-22760Mozilla: Cross-Origin responses could be distinguished between script and non-script content-types
  45. CVE-2022-22759Mozilla: Sandboxed iframes could have executed script if the parent appended elements
  46. CVE-2022-22756Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable
  47. CVE-2022-22754Mozilla: Extensions could have bypassed permission confirmation during update
  48. CVE-2022-22753Mozilla: Privilege Escalation to SYSTEM on Windows via Maintenance Service
  49. CVE-2022-22751Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5
  50. CVE-2022-22748Mozilla: Spoofed origin on external protocol launch dialog
CVE 2022 document archive — Page 59 | PulseLinux