DeutschShown in its original language — a full translation is planned for a future version.
Mehrere Red Hat Enterprise Linux Pakete: Mehrere Schwachstellen
view advisory published 2022-11-15
Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3787US | high7.8 | — | ||
A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-4197… | ||||
| CVE-2022-3500US | medium5.1 | — | ||
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent… | ||||
| CVE-2021-46828US | high7.5 | — | ||
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lea… | ||||
| CVE-2022-33068US | medium5.5 | — | ||
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. | ||||
| CVE-2022-29162US | high7.8OT elevated | — | ||
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created p… | ||||
| CVE-2022-1706US | medium6.5OT elevated | — | ||
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user envi… | ||||
| CVE-2022-26125US | high7.8 | — | ||
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c. | ||||
| CVE-2022-23645US | medium5.5 | — | ||
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A spe… | ||||
| CVE-2020-23903US | medium5.5 | — | ||
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-8444 vom 2022-11-24external
- Oracle Linux Security Advisory ELSA-2022-8453 vom 2022-11-24external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan