PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 69

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 69 / 73

  1. CVE-2022-2308kernel: use of uninitialized memory could lead to data leak in Virtio drivers with VDUSE
  2. CVE-2022-2304vim: stack buffer overflow in spell_dump_compl() at spell.c
  3. CVE-2022-2274openssl: AVX-512-specific heap buffer overflow
  4. CVE-2022-2264vim: out of bounds read in inc() at misc2.c
  5. CVE-2022-2257vim: an out-of-bound read in function msg_outtrans_special
  6. CVE-2022-2255mod_wsgi: Trusted Proxy Headers Removing Bypass
  7. CVE-2022-2226Mozilla: An email with a mismatching OpenPGP signature date was accepted as valid
  8. CVE-2022-2211libguestfs: Buffer overflow in get_keys leads to DoS
  9. CVE-2022-2200Mozilla: Undesired attributes could be set as part of prototype pollution
  10. CVE-2022-2196kernel: KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks
  11. CVE-2022-2175vim: buffer over-read in put_on_cmdline() at ex_getln.c
  12. CVE-2022-2153kernel: KVM: NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
  13. CVE-2022-2132dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
  14. CVE-2022-2127samba: out-of-bounds read in winbind AUTH_CRAP
  15. CVE-2022-2122gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression
  16. CVE-2022-2097openssl: AES OCB fails to encrypt some bytes
  17. CVE-2022-2085ghostscript: Null pointer dereference in gx_default_create_buf_device()
  18. CVE-2022-2084cloud-init: vulnerable to expose sensitive information
  19. CVE-2022-2078kernel: buffer overflow in nft_set_desc_concat_parse()
  20. CVE-2022-2068openssl: the c_rehash script allows command injection
  21. CVE-2022-2058libtiff: division by zero issues in tiffcrop
  22. CVE-2022-2057libtiff: division by zero issues in tiffcrop
  23. CVE-2022-2056libtiff: division by zero issues in tiffcrop
  24. CVE-2022-2042vim: use after free in skipwhite may lead to crash
  25. CVE-2022-2031samba: kpasswd authentication with canonicalization enabled against Samba AD DC with Heimdal returns a krbtgt
  26. CVE-2022-2000vim: out-of-bounds write in function append_command
  27. CVE-2022-1998kernel: fanotify misuses fd_install() which could lead to use-after-free
  28. CVE-2022-1976kernel: incorrect in-flight accounting in io_uring leads to use-after-free
  29. CVE-2022-1975kernel: sleep in atomic bug when firmware download timeout
  30. CVE-2022-1974kernel: use-after-free in /net/nfc/core.c causes kernel crash by simulating nfc device from user-space
  31. CVE-2022-1973kernel: a double-free in ntfs3 log_replay may lead to a crash
  32. CVE-2022-1972kernel: out-of-bounds write vulnerability in nftable may lead to local privilege escalation
  33. CVE-2022-1968vim: use-after-free in function utf_ptr2char at mbyte.c:1794
  34. CVE-2022-1966kernel: netfilter: nf_tables: incorrect NFT_STATEFUL_EXPR check leads to a use-after-free (write)
  35. CVE-2022-1962golang: go/parser: stack exhaustion in all Parse* functions
  36. CVE-2022-1955perl-SNMP_Session: lack of adequate security controls may lead to information disclosure
  37. CVE-2022-1949389-ds-base: access control bypass by query (filter in LDAP terms) optimiser
  38. CVE-2022-1943kernel: A slab-out-of-bounds Write bug when invoke udf_write_fi via ioctl
  39. CVE-2022-1942vim: out of bounds write in vim_regsub_both()
  40. CVE-2022-1941protobuf: message parsing vulnerability in ProtocolBuffers
  41. CVE-2022-1927vim: buffer over-read in utf_ptr2char() in mbyte.c
  42. CVE-2022-1925gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression
  43. CVE-2022-1924gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression
  44. CVE-2022-1923gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression
  45. CVE-2022-1922gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression
  46. CVE-2022-1921gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files
  47. CVE-2022-1920gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header()
  48. CVE-2022-1898vim: use-after-free in find_pattern_in_path() in search.c
  49. CVE-2022-1897vim: out-of-bounds write in vim_regsub_both() in regexp.c
  50. CVE-2022-1886vim: heap-based buffer overflow in function utf_head_off
CVE 2022 document archive — Page 69 | PulseLinux