PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 70

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 70 / 73

  1. CVE-2022-1882kernel: use-after-free in free_pipe_info() could lead to privilege escalation
  2. CVE-2022-1852kernel: NULL pointer dereference in x86_emulate_insn may lead to DoS
  3. CVE-2022-1851vim: out-of-bounds read in gchar_cursor() in misc1.c
  4. CVE-2022-1836kernel: Concurrency use-after-free in floppy's raw_cmd
  5. CVE-2022-1834Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email
  6. CVE-2022-1802Mozilla: Prototype pollution in Top-Level Await implementation
  7. CVE-2022-1796vim: Use After Free
  8. CVE-2022-1789kernel: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva
  9. CVE-2022-1786kernel: invalid-free in io_uring that can lead to LPE
  10. CVE-2022-1785vim: Out-of-bounds Write
  11. CVE-2022-1771vim: recursive command line loop may cause a Stack-based Buffer Overflow
  12. CVE-2022-1769vim: buffer over-read in scriptfile.c
  13. CVE-2022-1736gnome-control-center: GNOME Settings could allow unintended access to network services.
  14. CVE-2022-1735vim: changing text in visual mode may cause invalid memory access that lead to a heap buffer overflow
  15. CVE-2022-1734kernel: Use-After-Free in NFC driver in nfcmrvl_nci_unregister_dev when simulating NFC device from user-space
  16. CVE-2022-1733vim: Heap-based Buffer Overflow in cindent.c
  17. CVE-2022-1729kernel: race condition in perf_event_open leads to privilege escalation
  18. CVE-2022-1725vim: null pointer dereference in vim_regexec_string() at regexp.c
  19. CVE-2022-1720vim: buffer over-read in grab_file_name() in findfile.c
  20. CVE-2022-1708cri-o: memory exhaustion on the node when access to the kube api
  21. CVE-2022-1706ignition: configs are accessible from unprivileged containers in VMs running on VMware products
  22. CVE-2022-1705golang: net/http: improper sanitization of Transfer-Encoding header
  23. CVE-2022-1679kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges
  24. CVE-2022-1678kernel: improper update of sock reference in TCP pacing can lead to memory leak
  25. CVE-2022-1674vim: NULL pointer dereference in vim_regexec_string() of regexp.c
  26. CVE-2022-1671kernel: null-ptr-deref bugs in net/rxrpc/server_key.c in rxrpc_preparse_s
  27. CVE-2022-1665Power: Signed build of Red Hat Enterprise Linux for IBM Power can boot pre-production kernels
  28. CVE-2022-1652kernel: A concurrency use-after-free in floppy disk device driver.
  29. CVE-2022-1651kernel: A memory leak problem in acrn_dev_ioctl()
  30. CVE-2022-1650eventsource: Exposure of Sensitive Information
  31. CVE-2022-1629vim: buffer over-read in function find_next_quote
  32. CVE-2022-1623libtiff: out-of-bounds read in LZWDecode
  33. CVE-2022-1622libtiff: out-of-bounds read in LZWDecode
  34. CVE-2022-1621vim: heap buffer overflow in vim_strncpy
  35. CVE-2022-1620vim: NULL Pointer Dereference in vim_regexec_string() of regexp.c
  36. CVE-2022-1619vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c
  37. CVE-2022-1616vim: heap-buffer-overflow in append_command of src/ex_docmd.c
  38. CVE-2022-1615samba: GnuTLS gnutls_rnd() can fail and give predictable random values
  39. CVE-2022-1587pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c
  40. CVE-2022-1586pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c
  41. CVE-2022-1552postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox
  42. CVE-2022-1537gruntjs: race condition leading to arbitrary file write
  43. CVE-2022-1529Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution
  44. CVE-2022-1520Mozilla: Incorrect security status shown after viewing an attached email
  45. CVE-2022-1516kernel: null-ptr-deref caused by x25_disconnect
  46. CVE-2022-1508kernel: out-of-bounds read in iov_iter_revert() in lib/iov_iter.c
  47. CVE-2022-1473openssl: OPENSSL_LH_flush() breaks reuse of memory
  48. CVE-2022-1471SnakeYaml: Constructor Deserialization Remote Code Execution
  49. CVE-2022-1462kernel: possible race condition in drivers/tty/tty_buffers.c
  50. CVE-2022-1434openssl: Incorrect MAC key used in the RC4-MD5 ciphersuite
CVE 2022 document archive — Page 70 | PulseLinux