CVE-2022-1678
- EPSS 0.94%
- Veröffentlicht 25.05.2022 15:15:07
- Zuletzt bearbeitet 21.11.2024 06:41:14
An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.
CVE-2022-1183
- EPSS 0.31%
- Veröffentlicht 19.05.2022 10:15:09
- Zuletzt bearbeitet 21.11.2024 06:40:12
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by b...
- EPSS 0.02%
- Veröffentlicht 18.05.2022 17:15:08
- Zuletzt bearbeitet 21.11.2024 06:41:21
A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.
CVE-2022-29581
- EPSS 0.27%
- Veröffentlicht 17.05.2022 17:15:08
- Zuletzt bearbeitet 21.11.2024 06:59:20
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.
CVE-2022-1586
- EPSS 0.49%
- Veröffentlicht 16.05.2022 21:15:07
- Zuletzt bearbeitet 25.03.2025 19:39:30
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occu...
CVE-2022-1587
- EPSS 0.27%
- Veröffentlicht 16.05.2022 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:41:01
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
CVE-2022-1679
- EPSS 0.08%
- Veröffentlicht 16.05.2022 18:15:08
- Zuletzt bearbeitet 21.11.2024 06:41:14
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate the...
CVE-2022-30594
- EPSS 0.02%
- Veröffentlicht 12.05.2022 05:15:06
- Zuletzt bearbeitet 21.11.2024 07:02:59
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
CVE-2022-29155
- EPSS 18.06%
- Veröffentlicht 04.05.2022 20:15:07
- Zuletzt bearbeitet 21.11.2024 06:58:36
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter ...
CVE-2022-29824
- EPSS 0.07%
- Veröffentlicht 03.05.2022 03:15:06
- Zuletzt bearbeitet 21.11.2024 06:59:45
In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte...