CVE-2017-20024

Solare Solar-Log denial of service

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Solar-log

Products

Solar-log 1000 Solar-log 1000 Firmware Solar-log 1000 Pm\+ and 13 more

CVE-2022-3299

Open5GS AMF client.c denial of service

A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of the patch is 724fa568435dae45ef0c3a48b2aabde052afae88. It is recommended to apply a patch to fix this issue. The identifier VDB-209545 was assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Open5gs

Products

Open5gs

CVE-2022-3553

X.org Server xquartz X11Controller.m denial of service

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-211053 was assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS 1.7% KEV · Not listed

Vendors

X.org

Products

X Server

CVE-2022-3563

Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Bluez

Products

Bluez

CVE-2022-3619

Linux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leak

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. VDB-211918 is the identifier assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Rhel Eus and 1 more

CVE-2022-3624

Linux Kernel IPsec bond_alb.c rlb_arp_xmit memory leak

A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlb_arp_xmit of the file drivers/net/bonding/bond_alb.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211928.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2022-3630

Linux Kernel IPsec cookie.c memory leak

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects some unknown processing of the file fs/fscache/cookie.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211931.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2022-3637

Linux Kernel BlueZ jlink.c jlink_init denial of service

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed

Vendors

Bluez

Products

Bluez

CVE-2022-3647

Redis Crash Report debug.c sigsegvHandler denial of service

** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitability is told to be difficult. The real existence of this vulnerability is still doubted at the moment. Upgrading to version 6.2.8 and 7.0.6 is able to address this issue. The patch is identified as 0bf90d944313919eb8e63d3588bf63a367f020a3. It is recommended to apply a patch to fix this issue. VDB-211962 is the identifier assigned to this vulnerability. NOTE: The vendor claims that this is not a DoS because it applies to the crash logging mechanism which is triggered after a crash has occurred.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed

Vendors

Redis

Products

Redis

CVE-2022-3807

Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3809

Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service

A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3810

Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3813

Axiomatic Bento4 mp4edit memory leak

A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3814

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3815

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decrypt. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212681 was assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3816

Axiomatic Bento4 mp4decrypt memory leak

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212682 is the identifier assigned to this vulnerability.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3817

Axiomatic Bento4 mp4mux memory leak

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed

Vendors

Axiosys

Products

Bento4

CVE-2022-3957

GPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leak

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Gpac

Products

Gpac

CVE-2022-4066

davidmoreno onion Log response.c onion_response_flush allocation of resources

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.

CVSS 3.1 · 3.5 Low EPSS 1.2% KEV · Not listed

Vendors

Mozilla Onion Project

Products

Firefox Onion

CVE-2022-4246

Kakao PotPlayer MID File denial of service

A vulnerability classified as problematic has been found in Kakao PotPlayer. This affects an unknown part of the component MID File Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214623.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Kakaocorp

Products

Potplayer