DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Mehrere Red Hat Enterprise Linux Pakete: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-11-15
Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3787US | high7.8 | — | ||
A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-4197… | ||||
| CVE-2022-3500US | medium5.1 | — | ||
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent… | ||||
| CVE-2021-46828US | high7.5 | — | ||
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lea… | ||||
| CVE-2022-33068US | medium5.5 | — | ||
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors. | ||||
| CVE-2022-29162US | high7.8OT erhöht | — | ||
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created p… | ||||
| CVE-2022-1706US | medium6.5OT erhöht | — | ||
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user envi… | ||||
| CVE-2022-26125US | high7.8 | — | ||
Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis_tlvs.c. | ||||
| CVE-2022-23645US | medium5.5 | — | ||
swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A spe… | ||||
| CVE-2020-23903US | medium5.5 | — | ||
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2022-8444 vom 2022-11-24external
- Oracle Linux Security Advisory ELSA-2022-8453 vom 2022-11-24external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
- Red Hat Security Advisory vom 2022-11-15external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan