CVE 2022 document archive · 72
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
3,646 documents · Identifier year 2022 · 72 / 73
- CVE-2022-0987PackageKit: Information Disclosure in Transaction Interface via timing
- CVE-2022-0943vim: Heap-based Buffer Overflow occurs in vim
- CVE-2022-0934dnsmasq: Heap use after free in dhcp6_no_relay
- CVE-2022-0924libtiff: Out-of-bounds Read error in tiffcp
- CVE-2022-0918389-ds-base: sending crafted message could result in DoS
- CVE-2022-0909tiff: Divide By Zero error in tiffcrop
- CVE-2022-0908tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c
- CVE-2022-0907tiff: NULL Pointer Dereference in tiffcrop
- CVE-2022-0897libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service
- CVE-2022-0891libtiff: heap buffer overflow in extractImageSection
- CVE-2022-0865libtiff: reachable assertion
- CVE-2022-0854kernel: swiotlb information leak with DMA_FROM_DEVICE
- CVE-2022-0852convert2rhel: Red Hat account password passed via command line by code
- CVE-2022-0851convert2rhel: Activation key passed via command line by code
- CVE-2022-0850kernel: information leak in copy_page_to_iter() in iov_iter.c
- CVE-2022-0847kernel: improper initialization of the "flags" member of the new pipe_buffer
- CVE-2022-0841npm-lockfile: os command injection
- CVE-2022-0812kernel: NFS over RDMA random memory leakage
- CVE-2022-0778openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- CVE-2022-0742kernel: bug memory leaks in ICMPv6 handlers
- CVE-2022-0729vim: Use of Out-of-range Pointer Offset
- CVE-2022-0714vim: buffer overflow
- CVE-2022-0711haproxy: Denial of service via set-cookie2 header
- CVE-2022-0696vim: NULL Pointer Dereference in vim prior to 8.2
- CVE-2022-0685vim: Use of Out-of-range Pointer Offset in vim
- CVE-2022-0670ceph: user/tenant can obtain access (read/write) to any share
- CVE-2022-0669dpdk: sending vhost-user-inflight type messages could lead to DoS
- CVE-2022-0667bind: When chasing DS records, a timed-out or artificially delayed fetch could cause 'named' to crash while resuming a DS lookup
- CVE-2022-0646kernel: uaf bug in mctp-serial.c
- CVE-2022-0644kernel: Assertion failure can happen if users trigger kernel_read_file_from_fd()
- CVE-2022-0635bind: Lookups involving a DNAME could trigger an assertion failure when 'synth-from-dnssec' was enabled (which is the default)
- CVE-2022-0629vim: Stack-based Buffer Overflow in vim prior to 8.2.
- CVE-2022-0617kernel: NULL pointer dereference in udf_expand_file_adinicbdue() during writeback
- CVE-2022-0613urijs: Authorization Bypass Through User-Controlled Key
- CVE-2022-0586wireshark: RTMPT dissector infinite loop
- CVE-2022-0585wireshark: Large loops in multiple dissectors
- CVE-2022-0583wireshark: PVFS dissector crash
- CVE-2022-0582wireshark: CSN.1 dissector crash
- CVE-2022-0581wireshark: CMS dissector crash
- CVE-2022-0572vim: heap overflow in ex_retab() may lead to crash
- CVE-2022-0566thunderbird: Crafted email could trigger an out-of-bounds write
- CVE-2022-0563util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline
- CVE-2022-0562libtiff: Null source pointer lead to Denial of Service via crafted TIFF file
- CVE-2022-0561libtiff: Denial of Service via crafted TIFF file
- CVE-2022-0554vim: Use of Out-of-range Pointer Offset in vim
- CVE-2022-0536follow-redirects: Exposure of Sensitive Information via Authorization Header leak
- CVE-2022-0530unzip: SIGSEGV during the conversion of an utf-8 string to a local string
- CVE-2022-0529unzip: Heap out-of-bound writes and reads during conversion of wide string to local string
- CVE-2022-0516kernel: missing check in ioctl allows kernel memory read/write
- CVE-2022-0500kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges