DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2022-11-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
describes (23)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-26719US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-26717US | high8.8 | Exploit | ||
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTu… | ||||
| CVE-2022-26716US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-26710US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing malic… | ||||
| CVE-2022-26709US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Pro… | ||||
| CVE-2022-22629US | high8.8 | Exploit | ||
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and… | ||||
| CVE-2022-26700US | high8.8 | — | ||
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. P… | ||||
| CVE-2022-22628US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Pro… | ||||
| CVE-2022-22624US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing malic… | ||||
| CVE-2022-2990US | high7.1OT elevated | — | ||
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker ha… | ||||
| CVE-2022-2989US | high7.1OT elevated | — | ||
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has… | ||||
| CVE-2022-25310US | medium5.5 | — | ||
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pa… | ||||
| CVE-2022-25309US | medium5.5 | — | ||
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows a… | ||||
| CVE-2022-25308US | high7.8 | — | ||
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a poss… | ||||
| CVE-2022-32189US | high7.5 | — | ||
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service. | ||||
| CVE-2022-30699US | medium6.5 | — | ||
NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance.… | ||||
| CVE-2022-30698US | medium6.5 | — | ||
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. U… | ||||
| CVE-2022-22662US | medium6.5 | — | ||
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously craft… | ||||
| CVE-2022-30293US | high7.5 | — | ||
In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapp… | ||||
| CVE-2022-1049US | high8.8 | — | ||
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication… | ||||
showing 20 of 23
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-7822 vom 2022-11-24external
- Oracle Linux Security Advisory ELSA-2022-8431 vom 2022-11-24external
- Red Hat Security Advisory RHSA-2022:7398 vom 2023-01-18external
- Red Hat Security Advisory vom 2022-11-08external
- Red Hat Security Advisory vom 2022-11-08external
- Red Hat Security Advisory vom 2022-11-08external
- Red Hat Security Advisory vom 2022-11-08external
- Red Hat Security Advisory vom 2022-11-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan