CVE-2022-1973

kernel: a double-free in ntfs3 log_replay may lead to a crash

A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Linux Netapp

Products

Fedora Linux Kernel H300s and 9 more

CVE-2022-1786

kernel: invalid-free in io_uring that can lead to LPE

A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed

Vendors

Linux Netapp

Products

Linux Kernel H300s H300s Firmware and 8 more

CVE-2022-1734

kernel: Use-After-Free in NFC driver in nfcmrvl_nci_unregister_dev when simulating NFC device from user-space

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp

Products

Debian Linux Linux Kernel H300e and 15 more

CVE-2022-1729

kernel: race condition in perf_event_open leads to privilege escalation

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed

Vendors

Linux Netapp Redhat

Products

Linux Kernel Hci Baseboard Management Controller Enterprise Linux and 6 more

CVE-2022-1678

kernel: improper update of sock reference in TCP pacing can lead to memory leak

An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.

CVSS 3.1 · 5.9 Medium EPSS 2.9% KEV · Not listed

Vendors

Linux Netapp

Products

Linux Kernel Active Iq Unified Manager Bootstrap Os and 23 more

CVE-2022-1671

kernel: null-ptr-deref bugs in net/rxrpc/server_key.c in rxrpc_preparse_s

A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Linux Netapp

Products

Linux Kernel H300s H300s Firmware and 8 more

CVE-2022-1664

directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Debian Netapp

Products

Debian Linux Dpkg Ontap Select Deploy Administration Utility

CVE-2022-1652

kernel: A concurrency use-after-free in floppy disk device driver.

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp and 1 more

Products

Debian Linux Linux Kernel H300s and 10 more

CVE-2022-1623

libtiff: out-of-bounds read in LZWDecode

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Debian Fedoraproject Libtiff and 1 more

Products

Debian Linux Fedora Libtiff and 1 more

CVE-2022-1622

libtiff: out-of-bounds read in LZWDecode

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed

Vendors

Apple Fedoraproject Libtiff and 1 more

Products

Iphone Os Macos Tvos and 4 more

CVE-2022-1587

pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

CVSS 3.1 · 9.1 Critical EPSS 2.8% KEV · Not listed

Vendors

Fedoraproject Netapp Pcre and 1 more

Products

Fedora Active Iq Unified Manager H300s and 14 more

CVE-2022-1355

libtiff: stack-buffer-overflow in tiffcp.c in main()

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Libtiff and 2 more

Products

Debian Linux Fedora Libtiff and 2 more

CVE-2022-1353

kernel: kernel info leak issue in pfkey_register

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp and 1 more

Products

Debian Linux Linux Kernel H300e and 18 more

CVE-2022-1319

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Netapp Redhat

Products

Active Iq Unified Manager Cloud Secure Agent Oncommand Insight and 8 more

CVE-2022-1259

undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629)

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Netapp Redhat

Products

Active Iq Unified Manager Cloud Secure Agent Oncommand Insight and 9 more

CVE-2022-1183

Destroying a TLS session early causes assertion failure

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS over HTTPS (DoH), but configurations using DoT alone are unaffected. Affects BIND 9.18.0 -> 9.18.2 and version 9.19.0 of the BIND 9.19 development branch.

CVSS 3.1 · 7.5 High EPSS 6.2% KEV · Not listed

Vendors

Isc Netapp

Products

Bind H300s H300s Firmware and 8 more

CVE-2022-1056

libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Libtiff Netapp

Products

Libtiff Active Iq Unified Manager

CVE-2022-1048

kernel: race condition in snd_pcm_hw_free leading to use-after-free

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed

Vendors

Debian Linux Netapp and 1 more

Products

Debian Linux Linux Kernel H300e and 19 more

CVE-2022-0998

kernel: an integer overflow in the vhost_vdpa_config_validate() can lead to out-of-bounds access on top of a 32-bit Linux kernel

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Netapp

Products

Linux Kernel H300e H300e Firmware and 14 more

CVE-2022-0924

libtiff: Out-of-bounds Read error in tiffcp

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Debian Fedoraproject Libtiff and 2 more

Products

Debian Linux Fedora Libtiff and 2 more