CVE 2022 document archive · 71
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
3,646 documents · Identifier year 2022 · 71 / 73
- CVE-2022-1420vim: Out-of-range Pointer Offset
- CVE-2022-1419kernel: a concurrency use-after-free in vgem_gem_dumb_create
- CVE-2022-1381vim: global heap buffer overflow in skip_range
- CVE-2022-1355libtiff: stack-buffer-overflow in tiffcp.c in main()
- CVE-2022-1354libtiff: heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c
- CVE-2022-1353kernel: kernel info leak issue in pfkey_register
- CVE-2022-1350ghostscript: Improper release of objects in chunk_free_object during PCL to PDF conversion
- CVE-2022-1348logrotate: potential DoS from unprivileged users via the state file
- CVE-2022-1343openssl: Signer certificate verification returns inaccurate response when using OCSP_NOCHECKS
- CVE-2022-1328mutt: buffer overflow in uudecoder function
- CVE-2022-1304e2fsprogs: out-of-bounds read/write via crafted filesystem
- CVE-2022-1292openssl: c_rehash script allows command injection
- CVE-2022-1280kernel: concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources
- CVE-2022-1271gzip: arbitrary-file-write vulnerability
- CVE-2022-1263kernel: KVM: NULL pointer dereference in kvm_dirty_ring_push in virt/kvm/dirty_ring.c
- CVE-2022-1249pesign: NULL pointer dereference in cms_set_pw_data()
- CVE-2022-1247kernel: A race condition bug in rose_connect()
- CVE-2022-1227psgo: Privilege escalation in 'podman top'
- CVE-2022-1210tiff: Malicious file leads to a denial of service in TIFF File Handler
- CVE-2022-1205kernel: Null pointer dereference and use after free in net/ax25/ax25_timer.c
- CVE-2022-1204kernel: Use after free in net/ax25/af_ax25.c
- CVE-2022-1199kernel: Null pointer dereference and use after free in ax25_release()
- CVE-2022-1198kernel: use-after-free in drivers/net/hamradio/6pack.c
- CVE-2022-1197Mozilla: OpenPGP revocation information was ignored
- CVE-2022-1196Mozilla: Use-after-free after VR Process destruction
- CVE-2022-1195kernel: A possible race condition (use-after-free) in drivers/net/hamradio/6pack ( mkiss.c) after unregister_netdev
- CVE-2022-1184kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image
- CVE-2022-1183bind: Destroying a TLS session early causes assertion failure
- CVE-2022-1160vim: heap buffer overflow in get_one_sourceline
- CVE-2022-1158kernel: KVM: cmpxchg_gpte can write to pfns outside the userspace region
- CVE-2022-1154vim: use after free in utf_ptr2char
- CVE-2022-1122openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer
- CVE-2022-1117fapolicyd: fapolicyd wrongly prepares ld.so path
- CVE-2022-1116kernel: Integer Overflow or Wraparound vulnerability in io_uring
- CVE-2022-1115ImageMagick: heap-buffer-overflow in PushShortPixel of quantum-private.h
- CVE-2022-1114ImageMagick: heap-use-after-free in RelinquishDCMInfo of dcm.c
- CVE-2022-1097Mozilla: Use-after-free in NSSToken objects
- CVE-2022-1056libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c
- CVE-2022-1055kernel: use-after-free in tc_new_tfilter() in net/sched/cls_api.c
- CVE-2022-1050QEMU: pvrdma: use-after-free issue in pvrdma_exec_cmd()
- CVE-2022-1049pcs: improper authentication via PAM
- CVE-2022-1048kernel: race condition in snd_pcm_hw_free leading to use-after-free
- CVE-2022-1043kernel: Linux Kernel io_uring Use-After-Free Privilege Escalation Vulnerability
- CVE-2022-1016kernel: uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM
- CVE-2022-1015kernel: arbitrary code execution in linux/net/netfilter/nf_tables_api.c
- CVE-2022-1012kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak
- CVE-2022-1011kernel: FUSE allows UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes
- CVE-2022-0998kernel: an integer overflow in the vhost_vdpa_config_validate() can lead to out-of-bounds access on top of a 32-bit Linux kernel
- CVE-2022-0996389-ds-base: expired password was still allowed to access the database
- CVE-2022-0995kernel: kernel bug in the watch_queue subsystem