Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2022-3.0-0364
HistoryFeb 28, 2022 - 12:00 a.m.

Critical Photon OS Security Update - PHSA-2022-3.0-0364

2022-02-2800:00:00
github.com
14

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

92.3%

JSON

Updates of [‘freetype2’, ‘cassandra’, ‘go’] packages of Photon OS have been released.

Related

photon 7
nessus 50
ibm 23
mageia 2
freebsd 2
altlinux 1
suse 3
redhat 11
amazon 2
oraclelinux 4
osv 19
debian 4
redhatcve 5
checkpoint_advisories 2
prion 5
cve 4
cnvd 2
thn 2
veracode 6
githubexploit 5
hivepro 1
github 2
rocky 2
almalinux 2
ubuntucve 4
gitlab 2
centos 1
alpinelinux 4
cbl_mariner 8
qualysblog 1
gentoo 1
ubuntu 1
debiancve 4
fedora 2
cloudfoundry 1
malwarebytes 1
threatpost 1
archlinux 2
photon
photon
Critical Photon OS Security Update - PHSA-2022-0364
2022-02-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0159
2022-03-07 00:00:00
Critical Photon OS Security Update - PHSA-2022-0159
2022-03-02 00:00:00
nessus
nessus
openSUSE 15 Security Update : go1.16 (openSUSE-SU-2022:0724-1)
2022-03-05 00:00:00
openSUSE 15 Security Update : go1.17 (openSUSE-SU-2022:0723-1)
2022-03-05 00:00:00
SUSE SLED15 / SLES15 Security Update : go1.17 (SUSE-SU-2022:0723-1)
2022-03-05 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability in golang affects IBM Cloud Automation Manager
2022-03-15 17:37:28
Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2022-23772, CVE-2022-23773, CVE-2022-23806)
2022-04-22 21:06:28
Security Bulletin: Vulnerabilities in Celery, Golang Go, and Python affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift
2022-03-12 03:21:08
mageia
mageia
Updated golang packages fix security vulnerability
2022-03-08 02:10:22
Updated freetype2 packages fix security vulnerability
2020-10-20 19:22:12
freebsd
freebsd
go -- multiple vulnerabilities
2022-02-10 00:00:00
cassandra3 -- arbitrary code execution
2022-02-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.17.7-alt1
2022-02-11 00:00:00
suse
suse
Security update for go1.16 (important)
2022-03-04 00:00:00
Security update for go1.17 (important)
2022-03-04 00:00:00
Security update for freetype2 (important)
2020-10-26 00:00:00
redhat
redhat
(RHSA-2022:4860) Moderate: Release of OpenShift Serverless Client kn 1.22.1
2022-06-01 09:10:05
(RHSA-2022:4863) Moderate: Release of OpenShift Serverless Version 1.22.1
2022-06-01 12:07:22
(RHSA-2022:6094) Moderate: OpenShift Container Platform 4.10.28 packages and security update
2022-08-23 18:05:37
amazon
amazon
Medium: golang
2023-02-15 00:23:00
Important: freetype
2020-12-08 20:55:00
oraclelinux
oraclelinux
go-toolset:ol8addon security update
2022-06-08 00:00:00
go-toolset:ol8 security and bug fix update
2022-05-17 00:00:00
freetype security update
2020-11-13 00:00:00
osv
osv
golang-1.7 - security update
2022-04-28 00:00:00
golang-1.8 - security update
2022-04-28 00:00:00
BIT-cassandra-2021-44521
2024-03-06 10:50:58
debian
debian
[SECURITY] [DLA 2985-1] golang-1.7 security update
2022-04-28 09:57:28
[SECURITY] [DLA 2986-1] golang-1.8 security update
2022-04-28 09:57:43
[SECURITY] [DLA 2415-1] freetype security update
2020-10-25 21:59:56
redhatcve
redhatcve
CVE-2021-44521
2022-02-12 02:23:21
CVE-2022-23806
2022-02-11 10:46:58
CVE-2022-23773
2022-02-11 14:03:04
checkpoint_advisories
checkpoint_advisories
Apache Cassandra Remote Code Execution (CVE-2021-44521)
2022-03-10 00:00:00
Google Chrome Memory Corruption (CVE-2020-15999)
2020-10-24 00:00:00
prion
prion
Code injection
2022-02-11 13:15:00
Design/Logic Flaw
2022-02-11 01:15:00
Design/Logic Flaw
2022-02-11 01:15:00
cve
cve
CVE-2021-44521
2022-02-11 13:15:00
CVE-2022-23773
2022-02-11 01:15:00
CVE-2022-23806
2022-02-11 01:15:00
cnvd
cnvd
Apache Cassandra Code Injection Vulnerability
2022-02-15 00:00:00
Google Golang memory consumption overflow vulnerability
2022-02-14 00:00:00
thn
thn
High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
2022-02-16 05:18:00
New Chrome 0-day Under Active Attacks – Update Your Browser Now
2020-10-21 16:26:00
veracode
veracode
Remote Code Execution (RCE)
2022-02-14 04:33:14
Improper Access Control
2022-02-14 12:23:51
Denial Of Service (DoS)
2022-02-14 08:28:54
githubexploit
githubexploit
Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
2022-02-24 11:07:34
Exploit for Out-of-bounds Write in Google Chrome
2020-10-28 16:16:25
Exploit for Interpretation Conflict in Golang Go
2023-03-19 10:08:47
hivepro
hivepro
Apache Cassandra database affected by easily exploitable Remote code execution
2022-02-18 12:40:54
github
github
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
2022-02-12 00:00:48
Heap buffer overflow in CefSharp
2020-10-27 19:47:38
rocky
rocky
go-toolset:rhel8 security and bug fix update
2022-05-10 06:29:31
freetype security update
2020-11-05 08:26:43
almalinux
almalinux
Moderate: go-toolset:rhel8 security and bug fix update
2022-05-10 06:29:31
Important: freetype security update
2020-11-05 08:26:43
ubuntucve
ubuntucve
CVE-2022-23772
2022-02-11 00:00:00
CVE-2020-15999
2020-10-20 00:00:00
CVE-2022-23773
2022-02-11 00:00:00
gitlab
gitlab
Out-of-bounds Write
2020-10-27 00:00:00
Out-of-bounds Write
2020-10-27 00:00:00
centos
centos
freetype security update
2020-11-06 21:57:09
alpinelinux
alpinelinux
CVE-2022-23773
2022-02-11 01:15:00
CVE-2022-23806
2022-02-11 01:15:00
CVE-2022-23772
2022-02-11 01:15:00
cbl_mariner
cbl_mariner
CVE-2022-23773 affecting package golang 1.17.1-2
2022-04-26 19:57:46
CVE-2020-15999 affecting package freetype 2.9.1-4
2022-03-19 16:40:53
CVE-2022-23773 affecting package golang 1.16.12-1
2022-02-25 01:45:48
qualysblog
qualysblog
Vulnerability Detection Pipeline (Beta)
2020-09-16 17:43:34
gentoo
gentoo
FreeType: Arbitrary code execution
2020-10-23 00:00:00
ubuntu
ubuntu
FreeType vulnerability
2020-10-22 00:00:00
debiancve
debiancve
CVE-2020-15999
2020-11-03 03:15:00
CVE-2022-23773
2022-02-11 01:15:00
CVE-2022-23806
2022-02-11 01:15:00
fedora
fedora
[SECURITY] Fedora 31 Update: freetype-2.10.0-4.fc31
2020-11-07 01:28:39
[SECURITY] Fedora 33 Update: freetype-2.10.4-1.fc33
2020-10-25 01:01:39
cloudfoundry
cloudfoundry
USN-4593-1: FreeType vulnerability | Cloud Foundry
2020-11-19 00:00:00
malwarebytes
malwarebytes
Google patches actively exploited zero-day bug that affects Chrome users
2020-10-26 10:58:14
threatpost
threatpost
Microsoft IE Browser Death March Hastens
2020-10-26 22:26:57
archlinux
archlinux
[ASA-202010-10] freetype2: arbitrary code execution
2020-10-20 00:00:00
[ASA-202010-11] lib32-freetype2: arbitrary code execution
2020-10-20 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

92.3%

JSON
Related for PHSA-2022-3.0-0364
photon7nessus50ibm23mageia2freebsd2altlinux1suse3redhat11amazon2oraclelinux4osv19debian4redhatcve5checkpoint_advisories2prion5cve4cnvd2thn2veracode6githubexploit5hivepro1github2rocky2almalinux2ubuntucve4gitlab2centos1alpinelinux4cbl_mariner8qualysblog1gentoo1ubuntu1debiancve4fedora2cloudfoundry1malwarebytes1threatpost1archlinux2