PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 64

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 64 / 73

  1. CVE-2022-4543kernel: KASLR Prefetch Bypass Breaks KPTI
  2. CVE-2022-4515ctags: arbitrary command execution via a tag file with a crafted filename
  3. CVE-2022-4450openssl: double free after calling PEM_read_bio_ex
  4. CVE-2022-4415systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting
  5. CVE-2022-4382kernel: usb: use-after-free write in put_dev
  6. CVE-2022-4379kernel: use-after-free in __nfs42_ssc_open() in fs/nfs/nfs4file.c leading to remote Denial of Service attack
  7. CVE-2022-4378kernel: stack overflow in do_proc_dointvec and proc_skip_spaces
  8. CVE-2022-4345wireshark: multiple (BPv6, OpenFlow, and Kafka protocol) dissector infinite loops
  9. CVE-2022-4344wireshark: kafka dissector memory exhaustion.
  10. CVE-2022-4338openvswitch: Integer Underflow in Organization Specific TLV
  11. CVE-2022-4337openvswitch: Out-of-Bounds Read in Organization Specific TLV
  12. CVE-2022-4318cri-o: /etc/passwd tampering privesc
  13. CVE-2022-4304openssl: timing attack in RSA Decryption implementation
  14. CVE-2022-4293vim: floating point exception in num_divide() in src/eval.c
  15. CVE-2022-4292vim: use-after-free in did_set_spelllang() in src/spell.c
  16. CVE-2022-4285binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault
  17. CVE-2022-4283xorg-x11-server: XkbGetKbdByName use-after-free
  18. CVE-2022-4269kernel: net: CPU soft lockup in TC mirred egress-to-ingress action
  19. CVE-2022-4254sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
  20. CVE-2022-4245codehaus-plexus: XML External Entity (XXE) Injection
  21. CVE-2022-4244codehaus-plexus: Directory Traversal
  22. CVE-2022-4203openssl: read buffer overflow in X.509 certificate verification
  23. CVE-2022-4172QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record
  24. CVE-2022-4144QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read
  25. CVE-2022-4141vim: invalid memory access in substitute with function
  26. CVE-2022-4139kernel: i915: Incorrect GPU TLB flush can lead to random memory access
  27. CVE-2022-4132jss: Memory leak on TLS connections
  28. CVE-2022-4129kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference
  29. CVE-2022-4128kernel: mptcp: NULL pointer dereference in subflow traversal at disconnect time
  30. CVE-2022-4127kernel: io_uring: NULL pointer dereference in io_files_update_with_index_alloc
  31. CVE-2022-4123podman: Path disclosure
  32. CVE-2022-4122podman: Symlink error leads to information disclosure
  33. CVE-2022-4095kernel: Use-after-Free/Double-Free bug in read_bbreg_hdl in drivers/staging/rtl8712/rtl8712_cmd.c
  34. CVE-2022-4087ipxe: Padding oracle attack vulnerability
  35. CVE-2022-4065testng: a path traversal in zip files
  36. CVE-2022-4055xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments
  37. CVE-2022-3996openssl: double locking leads to denial of service
  38. CVE-2022-3977kernel: use-after-free bug in mctp_sk_unhash in net/mctp/af_mctp.c
  39. CVE-2022-3970libtiff: integer overflow in function TIFFReadRGBATileExt of the file
  40. CVE-2022-3924bind: sending specific queries to the resolver may cause a DoS
  41. CVE-2022-3910kernel: Improper update of reference count in io_uring leads to use-after-free
  42. CVE-2022-3903kernel: An invalid pipe direction in the mceusb driver cause the kernel to DOS
  43. CVE-2022-3872QEMU: sdhci: buffer data port register off-by-one read/write
  44. CVE-2022-3821systemd: buffer overrun in format_timespan() function
  45. CVE-2022-3787device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux
  46. CVE-2022-3786OpenSSL: X.509 Email Address Variable Length Buffer Overflow
  47. CVE-2022-3775grub2: Heap based out-of-bounds write when redering certain unicode sequences
  48. CVE-2022-3757exiv2: Heap-buffer-overflow in Exiv2::MemIo::read
  49. CVE-2022-3756exiv2: integer overflow in quicktimevideo.cpp
  50. CVE-2022-3755exiv2: Null-dereference READ in Exiv2::QuickTimeVideo::userDataDecoder
CVE 2022 document archive — Page 64 | PulseLinux