CVE-2022-35260
- EPSS 0.16%
- Veröffentlicht 05.12.2022 22:15:10
- Zuletzt bearbeitet 21.11.2024 07:10:59
curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte b...
CVE-2022-45934
- EPSS 0.33%
- Veröffentlicht 27.11.2022 04:15:10
- Zuletzt bearbeitet 29.04.2025 14:15:30
An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
- EPSS 0.02%
- Veröffentlicht 27.11.2022 02:15:16
- Zuletzt bearbeitet 21.11.2024 07:29:57
An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.
- EPSS 0.01%
- Veröffentlicht 25.11.2022 04:15:09
- Zuletzt bearbeitet 21.11.2024 07:29:53
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.
- EPSS 0.01%
- Veröffentlicht 25.11.2022 04:15:09
- Zuletzt bearbeitet 29.04.2025 14:15:28
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a device is disconnected.
- EPSS 0.02%
- Veröffentlicht 25.11.2022 04:15:09
- Zuletzt bearbeitet 21.11.2024 07:29:53
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads to a use-after-free.
CVE-2022-45887
- EPSS 0.01%
- Veröffentlicht 25.11.2022 04:15:09
- Zuletzt bearbeitet 25.04.2025 20:15:37
An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a dvb_frontend_detach call.
CVE-2022-45888
- EPSS 0.01%
- Veröffentlicht 25.11.2022 04:15:09
- Zuletzt bearbeitet 21.11.2024 07:29:53
An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device.
CVE-2022-40304
- EPSS 0.11%
- Veröffentlicht 23.11.2022 18:15:12
- Zuletzt bearbeitet 28.04.2025 20:15:19
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.
CVE-2022-40303
- EPSS 0.26%
- Veröffentlicht 23.11.2022 00:15:11
- Zuletzt bearbeitet 29.04.2025 05:15:43
An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset,...