Todo Lists

Scheduled advisories

Advisory Group Package Severity Type
ASA-202205-4 AVG-2709 firefox High multiple issues
ASA-202205-3 AVG-2710 thunderbird High multiple issues
ASA-202205-2 AVG-2679 git Medium arbitrary command execution
ASA-202205-1 AVG-2718 python-httpx Critical access restriction bypass
ASA-202204-14 AVG-2677 mediawiki Medium cross-site scripting
ASA-202204-13 AVG-2662 gvim High arbitrary code execution
ASA-202204-12 AVG-2662 vim High arbitrary code execution
ASA-202204-11 AVG-2655 powerdns Low denial of service
ASA-202204-10 AVG-2656 powerdns-recursor Low denial of service

Pending advisories

Group Package Severity Affected Fixed Ticket
AVG-2724 openldap Critical 2.6.1-1 2.6.2-1
AVG-2728 firefox Critical 100.0.1-1 100.0.2-1
AVG-2729 thunderbird Critical 91.9.0-1 91.9.1-1
AVG-2659 lib32-libtiff High 4.3.0-1 4.3.0-2 FS#74229
AVG-2672 linux-zen High 5.17.0-1 5.17.1-1
AVG-2673 linux High 5.17.0-1 5.17.1-1
AVG-2684 epiphany High 42.1-1 42.2-1
AVG-2686 jre-openjdk, jre-openjdk-headless, jdk-openjdk High 18-1 18.0.1u10-1
AVG-2687 jdk17-openjdk, jre17-openjdk, jre17-openjdk-headless High 17.0.2-1 17.0.3.u7-2
AVG-2688 jdk11-openjdk, jre11-openjdk, jre11-openjdk-headless High 11.0.14.1-1 11.0.15.u2-1
AVG-2689 jdk8-openjdk, jre8-openjdk, jre8-openjdk-headless High 8.322-1 8.323-1
AVG-2691 linux High 5.17.2.arch3-1 5.17.3.arch1-1
AVG-2692 linux-hardened High 5.17.3.hardened1-1 5.17.5.hardened1-1
AVG-2693 linux-zen High 5.17.2.zen3-1 5.17.3.zen1-1
AVG-2694 linux-lts High 5.15.33-1 5.15.34-1
AVG-2696 gitlab High 14.10-1 14.10.2-1
AVG-2698 linux High 5.17.2.arch3-1 5.17.3.arch1-1
AVG-2699 linux-zen High 5.17.2.zen3-1 5.17.3.zen1-1
AVG-2700 linux-hardened High 5.16.20.hardened1-1 5.17.5.hardened1-1
AVG-2703 webkit2gtk High 2.34.6-1 2.34.7-1
AVG-2719 postgresql High 14.2-1 14.3-1
AVG-2720 chromium High 101.0.4951.54-1 101.0.4951.64-1
AVG-2722 clamav High 0.104.2-1 0.105.0-1
AVG-2685 curl Medium 7.82.0-3 7.83.0-1
AVG-2697 dpdk Medium 21.11-1 22.03-1
AVG-2706 curl Medium 7.83.0-1 7.83.1-1

Bumped packages

Group Package Severity Affected Current Ticket
AVG-2626 zaproxy Critical 2.11.0-1 2.11.1-2 [community]
FS#72975
AVG-2701 linux-lts High 5.15.14-1 5.15.41-1 [core]
AVG-2651 webkit2gtk-5.0 High 2.34.5-1 2.36.2-1 [extra]
AVG-2650 webkit2gtk-4.1 High 2.34.5-1 2.36.2-1 [extra]
AVG-2649 webkit2gtk High 2.34.5-1 2.36.2-1 [extra]
AVG-2317 lib32-openssl-1.0 High 1.0.2.u-1 1.0.2.u-2 [multilib]
AVG-2275 nim High 1.4.8-1 1.6.6-1 [community]
AVG-2190 jre8-openjdk-headless, jdk8-openjdk High 8.u292-1 8.332.u09-1 [extra]
AVG-2683 linux-lts Medium 5.15.34-1 5.15.41-1 [core]
AVG-2645 clementine Medium 1.4.0rc1+759+gd033b38c4-1 1.4.0rc2-1 [community]
AVG-2630 perl Medium 5.34.0-3 5.34.1-1 [core]
AVG-2616 privoxy Medium 3.0.32-1 3.0.33-1 [community]
AVG-2584 gerbv Medium 2.8.1-1 2.8.1-2 [community]
AVG-2520 libheif Medium 1.12.0-2 1.12.0-3 [extra]
AVG-2493 gitlab-gitaly Medium 14.3.0-3 14.4.5-2 [community]
AVG-2406 redis Medium 6.2.6-1 7.0.0-1 [community]
AVG-2396 libde265 Medium 1.0.8-1 1.0.8-2 [extra]
AVG-2394 kube-apiserver Medium 1.23.0-1 1.24.0-1 [community]
AVG-2367 openvpn Medium 2.5.5-1 2.5.6-1 [extra]
AVG-2345 linux Medium 5.15.8.arch1-1 5.17.9.arch1-1 [core]
AVG-2333 rsync Medium 3.2.3-4 3.2.4-1 [extra]
AVG-2273 trojita Medium 0.7-5 0.7-7 [community]
AVG-2264 perl Medium 5.34.0-3 5.34.1-1 [core]
AVG-2186 lib32-libsndfile Medium 1.0.31-1 1.1.0-1 [multilib]
AVG-2142 prusa-slicer Medium 2.3.3-3 2.4.2-1 [community]
AVG-2117 keystone Medium 0.9.2-2 0.9.2-3 [community]
AVG-2114 tensorflow Medium 2.7.0-4 2.8.0-7 [community]
AVG-2111 dcraw Medium 9.28.0-2 9.28.0-3 [community]
AVG-2067 opendmarc Medium 1.4.1.1-2 1.4.2-2 [community]
FS#72812
AVG-2014 lib32-libgcrypt15 Medium 1.5.6-5 1.5.6-7 [multilib]
AVG-2013 libgcrypt15 Medium 1.5.6-4 1.5.6-6 [community]
AVG-1941 ansible-core Medium 2.12.1-1 2.13.0-1 [community]
AVG-1881 linux-hardened Medium 5.15.7.hardened1-1 5.17.9.hardened1-1 [extra]
AVG-1880 linux-zen Medium 5.15.8.zen1-1 5.17.9.zen1-1 [extra]
AVG-1879 linux Medium 5.15.8.arch1-1 5.17.9.arch1-1 [core]
AVG-1823 gpac Medium 1:1.0.1-1 1:1.0.1-3 [community]
AVG-1741 linux-lts Medium 5.10.85-1 5.15.41-1 [core]
AVG-1676 upx Medium 3.96-2 3.96-3 [community]
AVG-1542 sthttpd Medium 2.27.1-3 2.27.1-4 [community]
AVG-1516 evolution Medium 3.42.2-1 3.44.1-1 [extra]
AVG-1486 bitcoin-daemon Medium 22.0-1 23.0-1 [community]
AVG-1427 podofo Medium 0.9.7-1 0.9.8-1 [community]
AVG-1420 xdg-utils Medium 1.1.3+19+g9816ebb-1 1.1.3+21+g1a58bc2-1 [extra]
AVG-1390 openjpeg2 Medium 2.4.0-1 2.5.0-1 [extra]
AVG-1360 edk2-shell Medium 202111-4 202202-2 [extra]
AVG-1354 xerces-c Medium 3.2.3-5 3.2.3-6 [extra]
AVG-1342 pass Medium 1.7.4-1 1.7.4-2 [community]
AVG-2644 mruby Low 3.0.0-1 3.1.0-1 [community]
AVG-2615 ruby-bundler Low 2.2.26-1 2.3.10-1 [community]
AVG-2569 go-ethereum Low 1.10.13-1 1.10.17-1 [community]
AVG-2545 nomacs Low 1:3.17.2206-5 1:3.17.2206-7 [community]
AVG-2404 faust Low 2.37.3-1 2.40.0-1 [community]
AVG-2104 imagemagick Low 7.1.0.17-1 7.1.0.35-1 [extra]
AVG-2091 manuskript Low 0.12.0-1 0.13.1-1 [community]
AVG-1915 kube-proxy, kubelet, kube-scheduler, kube-controller-manager, kube-apiserver Low 1.23.0-1 1.24.0-1 [community]
AVG-1777 vigra Low 1.11.1.r45+g8acd73a5-5 1.11.1.r67+g093d57d1-2 [community]
AVG-1673 kexec-tools Low 2.0.21-1 2.0.24-1 [extra]
AVG-1594 linux Low 5.15.8.arch1-1 5.17.9.arch1-1 [core]
AVG-1311 audacity Low 1:2.4.1-4 1:2.4.1-7 [community]

Undetermined groups

Group Package Severity Affected Status
AVG-2669 linux-hardened High 5.15.14-1 Unknown
AVG-2702 openssl Medium 1.1.1.n-1 Unknown
AVG-2725 containerd Unknown 1.6.0-2 Unknown

Issues missing details

Issue Severity Remote Type Description
CVE-2022-29824 Medium Unknown Arbitrary code execution
Integer overflow in xmlBuf (buf.c) and xmlBuffer (tree.c) can lead to out-of-bounds memory...
CVE-2022-28388 High Unknown Unknown
usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1...
CVE-2022-28288 Medium Unknown Arbitrary code execution
Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla...
CVE-2022-28287 Low Unknown Unknown
In unusual circumstances, selecting text could cause text selection caching to behave...
CVE-2022-28285 Medium Unknown Unknown
When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was...
CVE-2022-28284 Medium Unknown Unknown
SVG's <use> element could have been used to load unexpected content that could have...
CVE-2022-28283 Medium Unknown Unknown
The sourceMapURL feature in devtools was missing security checks that would have allowed a...
CVE-2022-28282 Medium Unknown Unknown
By using a link with rel="localization" a use-after-free could have been triggered by...
CVE-2022-28209 Critical Unknown Unknown
An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof...
CVE-2022-28206 Critical Unknown Unknown
An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the...
CVE-2022-28205 Critical Unknown Unknown
An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a...
CVE-2022-28144 Medium Yes Unknown
Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several...
CVE-2022-28142 High Yes Unknown
Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally...
CVE-2022-28139 Medium Yes Unknown
A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows...
CVE-2022-28137 Medium Yes Unknown
A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and...
CVE-2022-28134 Medium Yes Unknown
Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission...
CVE-2022-27942 Unknown Unknown Unknown
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c
CVE-2022-27941 Unknown Unknown Unknown
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in...
CVE-2022-27940 Unknown Unknown Unknown
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c
CVE-2022-27939 Unknown Unknown Unknown
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c
CVE-2022-27782 Medium Unknown Unknown
libcurl would reuse a previously created connection even when a TLS or SSH related option...
CVE-2022-27781 Low Unknown Unknown
libcurl provides the `CURLOPT_CERTINFO` option to allow applications to request details to...
CVE-2022-27780 Medium Unknown Unknown
The curl URL parser wrongly accepts percent-encoded URL separators like '/' when decoding...
CVE-2022-27779 Medium Unknown Unknown
libcurl wrongly allows HTTP cookies to be set for Top Level Domains (TLDs) if the host name...
CVE-2022-27778 Medium Unknown Unknown
If curl adds a number to not "clobber" the output and an error occurs during transfer, the...
CVE-2022-27666 High Unknown Unknown
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c...
CVE-2022-27223 High Unknown Unknown
In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint...
CVE-2022-26966 Medium Unknown Unknown
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...
CVE-2022-26878 Medium Unknown Unknown
drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket...
CVE-2022-26490 High Unknown Unknown
st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel...
CVE-2022-26387 High Unknown Unknown
When installing an add-on, Thunderbird verified the signature before prompting the user;...
CVE-2022-26386 Low No Unknown
Previously Thunderbird for macOS and Linux would download temporary files to a...
CVE-2022-26384 High Yes Unknown
If an attacker could control the contents of an iframe sandboxed with allow-popups but not...
CVE-2022-26383 High Yes Unknown
When resizing a popup after requesting fullscreen access, the popup would not display the...
CVE-2022-25310 Unknown No Unknown
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...
CVE-2022-25309 Unknown No Unknown
A heap-based buffer overflow flaw was found in the Fribidi package and affects the...
CVE-2022-24959 Medium Unknown Unknown
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...
CVE-2022-24958 High Unknown Unknown
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
CVE-2022-24761 High Yes Unknown
waitress behind a proxy that does not properly validate the incoming HTTP request matches...
CVE-2022-24713 Low Unknown Unknown
The rust regex crate did not properly prevent crafted regular expressions from taking an...
CVE-2022-24303 Unknown Unknown Unknown
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames...
CVE-2022-23901 Unknown Unknown Unknown
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
CVE-2022-23648 Unknown Unknown Information disclosure
containers launched through containerd’s CRI implementation with a specially-crafted image...
CVE-2022-23308 High Unknown Arbitrary code execution
Use-after-free of ID and IDREF attributes in valid.c
CVE-2022-22817 Unknown Unknown Unknown
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such...
CVE-2022-22816 Unknown Unknown Unknown
path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization...
CVE-2022-22815 Unknown Unknown Unknown
path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path
CVE-2022-22637 High Yes Unknown
A logic issue was addressed with improved state management. A malicious website may cause...
CVE-2022-21496 Medium Yes Unknown
CVE-2022-21476 High Yes Unknown
CVE-2022-21443 Low Yes Unknown
CVE-2022-21434 Medium Yes Unknown
CVE-2022-21426 Medium Yes Unknown
CVE-2022-20803 Unknown Yes Arbitrary code execution
possible double-free vulnerability in the OLE2 file parser
CVE-2022-20796 Medium Unknown Unknown
possible NULL-pointer dereference crash in the scan verdict cache check
CVE-2022-20792 Unknown Yes Arbitrary code execution
possible multi-byte heap buffer overflow write vulnerability in the signature database load module
CVE-2022-1652 Unknown Unknown Unknown
A concurrency use-after-free was found in the Linux kernel.
CVE-2022-1641 Medium Unknown Unknown
Use after free in Web UI Diagnostics.
CVE-2022-1640 High Unknown Unknown
Use after free in Sharing.
CVE-2022-1639 High Unknown Unknown
Use after free in ANGLE.
CVE-2022-1638 High Unknown Unknown
Heap buffer overflow in V8 Internationalization.
CVE-2022-1637 High Unknown Unknown
Inappropriate implementation in Web Contents.
CVE-2022-1636 High Unknown Unknown
Use after free in Performance APIs.
CVE-2022-1635 High Unknown Unknown
Use after free in Permission Prompts.
CVE-2022-1634 High Unknown Unknown
Use after free in Browser UI.
CVE-2022-1633 High Unknown Unknown
Use after free in Sharesheet.
CVE-2022-1516 Unknown Unknown Unknown
A NULL pointer dereference flaw in the implementation of the X.25 set of standardized...
CVE-2022-1510 Medium Unknown Denial of service
GitLab all versions starting from 13.9 before 14.8.6, all versions starting from 14.9...
CVE-2022-1460 Medium Unknown Access restriction bypass
GitLab all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before...
CVE-2022-1433 Low Unknown Unknown
Missing invalidation of Markdown caching causes potential payloads from a previously...
CVE-2022-1431 Medium Unknown Denial of service
GitLab all versions starting from 12.10 before 14.8.6, all versions starting from 14.9...
CVE-2022-1428 Medium Unknown Denial of service
GitLab all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all...
CVE-2022-1426 Low Unknown Authentication bypass
GitLab from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions...
CVE-2022-1423 High Unknown Arbitrary code execution
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions...
CVE-2022-1417 Medium Unknown Authentication bypass
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before...
CVE-2022-1416 Medium Unknown Unknown
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all...
CVE-2022-1413 Medium Unknown Information disclosure
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before...
CVE-2022-1406 Medium Unknown Insufficient validation
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6,...
CVE-2022-1353 Unknown Unknown Unknown
A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux...
CVE-2022-1352 Medium Unknown Information disclosure
Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all...
CVE-2022-1328 Unknown Unknown Unknown
Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before...
CVE-2022-1292 Medium Unknown Unknown
The c_rehash script does not properly sanitise shell metacharacters to prevent command...
CVE-2022-1205 Unknown Unknown Unknown
There are NPD and use-after-free vulnerabilities in net/ax25/ax25_timer.c of linux that...
CVE-2022-1204 Unknown Unknown Unknown
There are use-after-free vulnerabilities in net/ax25/af_ax25.c of linux that allow attacker...
CVE-2022-1199 Unknown Unknown Unknown
There are null-ptr-deref vulnerability and use-after-free vulnerabilities in...
CVE-2022-1198 Unknown Unknown Unknown
There are use-after-free vulnerabilities in drivers/net/hamradio/6pack.c of linux that...
CVE-2022-1197 Medium Unknown Unknown
When importing a revoked key that specified key compromise as the revocation reason,...
CVE-2022-1196 Medium Unknown Unknown
After a VR Process is destroyed, a reference to it may have been retained and used, leading...
CVE-2022-1195 Unknown Unknown Unknown
A use-after-free vulnerability was found in drivers/net/hamradio in the Linux kernel. In...
CVE-2022-1172 Medium Unknown Unknown
Null Pointer Dereference Caused Segmentation Fault in gpac prior to 2.1.0-DEV
CVE-2022-1158 Unknown Unknown Unknown
Linux Kernel v5.2+: x86/kvm: cmpxchg_gpte can write to pfns outside the userspace region
CVE-2022-1124 Medium Unknown Information disclosure
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions...
CVE-2022-1106 Unknown Unknown Unknown
use after free in mrb_vm_exec in mruby prior to 3.2
CVE-2022-1096 High Yes Unknown
It is a type confusion weakness in the Chrome V8 JavaScript engine. Google is aware that an...
CVE-2022-1048 Unknown Unknown Unknown
race condition in snd_pcm_hw_free leading to use-after-free
CVE-2022-1016 Unknown Unknown Unknown
CVE-2022-1016 pertains to uninitialized stack data in the nft_do_chain routine....
CVE-2022-1015 Unknown Unknown Unknown
CVE-2022-1015 pertains to an out of bounds access in nf_tables expression evaluation due to...
CVE-2022-0854 Medium Unknown Unknown
A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls...
CVE-2022-0843 Medium Unknown Arbitrary code execution
Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory...
CVE-2022-0617 Medium Unknown Unknown
A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in...
CVE-2022-0494 Medium Unknown Unknown
A kernel information leak flaw was identified in the scsi_ioctl function in...
CVE-2022-0358 High No Unknown
In the QEMU virtio-fs shared file system daemon (virtiofsd) a local guest user can create...
CVE-2022-0168 Unknown Unknown Unknown
A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info...
CVE-2021-4207 High Unknown Unknown
In the QXL display device emulation in QEMU. A double fetch of guest controlled values...
CVE-2021-4197 High Unknown Unknown
An unprivileged write to the file handler flaw in the Linux kernel's control groups and...
CVE-2021-4156 High Unknown Unknown
An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker...

Orphan issues

Issue Severity Remote Type Description
CVE-2021-4206 High No Arbitrary code execution
An integer overflow in the cursor_alloc() function of the QXL display device emulation can...
CVE-2021-4207 High Unknown Unknown
In the QXL display device emulation in QEMU. A double fetch of guest controlled values...
CVE-2021-45046 Medium Yes Denial of service
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete...
CVE-2022-0358 High No Unknown
In the QEMU virtio-fs shared file system daemon (virtiofsd) a local guest user can create...
CVE-2022-0494 Medium Unknown Unknown
A kernel information leak flaw was identified in the scsi_ioctl function in...
CVE-2022-0617 Medium Unknown Unknown
A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in...
CVE-2022-0854 Medium Unknown Unknown
A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls...
CVE-2022-0987 Low No Information disclosure
A vulnerability was found in PackageKit in the way some of the methods exposed by the...
CVE-2022-1011 High No Privilege escalation
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user...
CVE-2022-1106 Unknown Unknown Unknown
use after free in mrb_vm_exec in mruby prior to 3.2
CVE-2022-1172 Medium Unknown Unknown
Null Pointer Dereference Caused Segmentation Fault in gpac prior to 2.1.0-DEV
CVE-2022-1215 High No Privilege escalation
Format string vulnerability in evdev device handling
CVE-2022-1328 Unknown Unknown Unknown
Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before...
CVE-2022-1652 Unknown Unknown Unknown
A concurrency use-after-free was found in the Linux kernel.
CVE-2022-22815 Unknown Unknown Unknown
path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path
CVE-2022-22816 Unknown Unknown Unknown
path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization...
CVE-2022-22817 Unknown Unknown Unknown
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such...
CVE-2022-23901 Unknown Unknown Unknown
A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.
CVE-2022-24303 Unknown Unknown Unknown
Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames...
CVE-2022-24448 Low No Information disclosure
A flaw was found in the Linux kernel. When an application tries to open a directory (using...
CVE-2022-24903 High Yes Arbitrary code execution
A flaw was found in rsyslog's reception TCP modules. This flaw allows an attacker to craft...
CVE-2022-24958 High Unknown Unknown
drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.
CVE-2022-24959 Medium Unknown Unknown
An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...
CVE-2022-25308 Medium No Denial of service
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an...
CVE-2022-25309 Unknown No Unknown
A heap-based buffer overflow flaw was found in the Fribidi package and affects the...
CVE-2022-25310 Unknown No Unknown
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...
CVE-2022-26353 High No Arbitrary code execution
the fix for CVE-2021-3748 forgot to unmap the cached virtqueue elements on error, leading...
CVE-2022-26354 Low No Denial of service
In case of error in the vhost-vsock device, an invalid element was not detached from the...
CVE-2022-26878 Medium Unknown Unknown
drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket...
CVE-2022-26966 Medium Unknown Unknown
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...
CVE-2022-27223 High Unknown Unknown
In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint...
CVE-2022-27939 Unknown Unknown Unknown
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c
CVE-2022-27940 Unknown Unknown Unknown
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c
CVE-2022-27941 Unknown Unknown Unknown
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in...
CVE-2022-27942 Unknown Unknown Unknown
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c