PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 68

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 68 / 73

  1. CVE-2022-2873kernel: an out-of-bounds vulnerability in i2c-ismt driver
  2. CVE-2022-2869libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits()
  3. CVE-2022-2868libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits()
  4. CVE-2022-2867libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c
  5. CVE-2022-2850389-ds-base: SIGSEGV in sync_repl
  6. CVE-2022-2845vim: Buffer Under-read
  7. CVE-2022-2819vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c
  8. CVE-2022-2817vim: heap use-after-free in string_quote() at src/strings.c
  9. CVE-2022-2816vim: out-of-bounds read in check_vim9_unlet() at src/vim9cmds.c
  10. CVE-2022-2795bind: processing large delegations may severely degrade resolver performance
  11. CVE-2022-2785kernel: out-of-bounds read due to improper check of bpf_sys_bpf() arguments
  12. CVE-2022-2739podman: Security regression of CVE-2020-14370 due to source code management issue
  13. CVE-2022-2738podman: Security regression of CVE-2020-8945 due to source code management issue
  14. CVE-2022-2735pcs: obtaining an authentication token for hacluster user could lead to privilege escalation
  15. CVE-2022-2719ImageMagick: Assertion Failure could lead to DoS due to attempted writing of NULL image list
  16. CVE-2022-2663kernel: netfilter: nf_conntrack_irc message handling issue
  17. CVE-2022-2639kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()
  18. CVE-2022-2625postgresql: Extension scripts replace objects not belonging to the extension.
  19. CVE-2022-2602kernel: use-after-free when an io_uring request is being processed
  20. CVE-2022-2601grub2: Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
  21. CVE-2022-2598vim: Undefined Behavior for Input to API in vim
  22. CVE-2022-2596node-fetch: Denial of Service in GitHub repository node-fetch
  23. CVE-2022-2590kernel: unprivileged tampering of shmem files
  24. CVE-2022-2588kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation
  25. CVE-2022-2586kernel: nf_tables cross-table potential use-after-free may lead to local privilege escalation
  26. CVE-2022-2585kernel: posix cpu timer use-after-free may lead to local privilege escalation
  27. CVE-2022-2581vim: Out-of-bounds Read in vim src/regexp.c
  28. CVE-2022-2580vim: Out-of-bounds Read in vim
  29. CVE-2022-2571vim: Heap-based Buffer Overflow in vim
  30. CVE-2022-2553booth: authfile directive in booth config file is completely ignored.
  31. CVE-2022-2526systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c
  32. CVE-2022-2522vim: heap-based buffer overflow in ins_compl_infercase_gettext() at src/insexpand.c
  33. CVE-2022-2521libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c
  34. CVE-2022-2520libtiff: Assertion fail in rotateImage() function at tiffcrop.c
  35. CVE-2022-2519libtiff: Double free or corruption in rotateImage() function at tiffcrop.c
  36. CVE-2022-2509gnutls: Double free during gnutls_pkcs7_verify
  37. CVE-2022-2505Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1
  38. CVE-2022-2503kernel: LoadPin bypass via dm-verity table reload
  39. CVE-2022-2476wavpack: null pointer dereference in main() in cli/wvunpack.c
  40. CVE-2022-2447Openstack: Application credential token remains valid longer than expected
  41. CVE-2022-2414pki-core: access to external entities when parsing XML can lead to XXE
  42. CVE-2022-2393pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field
  43. CVE-2022-2380kernel: vulnerability in sm712fb driver
  44. CVE-2022-2345vim: use-after-free in skipwhite() in charset.c
  45. CVE-2022-2344vim: heap-based buffer overflow in ins_compl_add() in insexpand.c
  46. CVE-2022-2343vim: heap-based buffer overflow in ins_compl_add() in insexpand.c
  47. CVE-2022-2320xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension
  48. CVE-2022-2319xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access
  49. CVE-2022-2318Kernel: A use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c
  50. CVE-2022-2309lxml: NULL Pointer Dereference in lxml
CVE 2022 document archive — Page 68 | PulseLinux