PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 63

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 63 / 73

  1. CVE-2022-21291OpenJDK: Incorrect marking of writeable fields (Hotspot, 8270386)
  2. CVE-2022-21283OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)
  3. CVE-2022-21282OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)
  4. CVE-2022-21278mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2022)
  5. CVE-2022-21277OpenJDK: Incorrect reading of TIFF files in TIFFNullDecompressor (ImageIO, 8270952)
  6. CVE-2022-21270mysql: Server: Federated unspecified vulnerability (CPU Jan 2022)
  7. CVE-2022-21265mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2022)
  8. CVE-2022-21264mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2022)
  9. CVE-2022-21256mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Jan 2022)
  10. CVE-2022-21254mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2022)
  11. CVE-2022-21253mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2022)
  12. CVE-2022-21249mysql: Server: DDL unspecified vulnerability (CPU Jan 2022)
  13. CVE-2022-21248OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)
  14. CVE-2022-21245mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2022)
  15. CVE-2022-21233hw: cpu: Intel: Stale Data Read from legacy xAPIC vulnerability
  16. CVE-2022-21227sqlite3: Denial of Service (DoS) in sqlite3
  17. CVE-2022-21222css-what: ReDoS due to insecure regular expression
  18. CVE-2022-21216kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors
  19. CVE-2022-21166hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
  20. CVE-2022-21151hw: cpu: information disclosure in certain Intel processors
  21. CVE-2022-21136hw: cpu: denial of service in some Intel Xeon processors
  22. CVE-2022-21131hw: cpu: information disclosure in some Intel Xeon processors
  23. CVE-2022-21127hw: cpu: Incomplete cleanup in specific special register read operations (aka SRBDS update)
  24. CVE-2022-21125hw: cpu: incomplete clean-up of microarchitectural fill buffers (aka SBDS)
  25. CVE-2022-21123hw: cpu: incomplete clean-up of multi-core shared buffers (aka SBDR)
  26. CVE-2022-20572kernel: missing DM_TARGET_IMMUTABLE feature flag in verity_target in drivers/md/dm-verity-target.c
  27. CVE-2022-20567kernel: race in pppol2tp_release
  28. CVE-2022-20566kernel: possible use after free due to improper locking in l2cap_chan_put of l2cap_core
  29. CVE-2022-20421kernel: use after free in binder_inc_ref_for_node in drivers/android/binder.c due
  30. CVE-2022-20369kernel: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
  31. CVE-2022-20368kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()
  32. CVE-2022-20166kernel: possible buffer overflow in sysfs reading
  33. CVE-2022-20154kernel: possible use after free in lock_sock_nested of sock.c for the SCTP protocol
  34. CVE-2022-20153kernel: possible use-after-free due to improper locking in rcu_cblist_dequeue of rcu_segcblist.c
  35. CVE-2022-20148kernel: Use after free in f2fs_available_memory
  36. CVE-2022-20141kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets
  37. CVE-2022-20132kernel: Out of bounds read in lg_probe and related functions of hid-lg.c
  38. CVE-2022-4994kernel: KVM: x86: wean fast IN from emulator_pio_in
  39. CVE-2022-4964pipewire: grants microphone access even when the snap interface for audio-record
  40. CVE-2022-4904c-ares: buffer overflow in config_sortlist() due to missing string length check
  41. CVE-2022-4900php: potential buffer overflow in php_cli_server_startup_workers
  42. CVE-2022-4899zstd: mysql: buffer overrun in util.c
  43. CVE-2022-4883libXpm: compression commands depend on $PATH
  44. CVE-2022-4842kernel: ntfs3: NULL pointer dereference in attr_punch_hole() in fs/ntfs3/attrib.c
  45. CVE-2022-4744kernel: tun: avoid double free in tun_free_netdev
  46. CVE-2022-4743SDL2: memory leak in GLES_CreateTexture() in render/opengles/SDL_render_gles.c
  47. CVE-2022-4696kernel: user-after-free during IORING_OP_SPLICE operation
  48. CVE-2022-4662kernel: Recursive locking violation in usb-storage that can cause the kernel to deadlock
  49. CVE-2022-4645libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c
  50. CVE-2022-4603ppp: improper validation of array index of the component pppdump
CVE 2022 document archive — Page 63 | PulseLinux