Security Bulletin: Multiple Vulnerabilities in Cloud Pak for Watson AIOPs

Summary 3.5 Fixes the following vulnerabilities: CVE-2022-1154, CVE-2018-25032, CVE-2020-29582, CVE-2022-24329, CVE-2022-29217, CVE-2022-22476, CVE-2022-1271, CVE-2022-0778 Vulnerability Details CVEID:CVE-2022-1154 DESCRIPTION: Vim is vulnerable to a heap-based buffer overflow, caused by a...

GSD-2022-1005677 ksmbd: fix heap-based overflow in set_ntacl_dacl()

ksmbd: fix heap-based overflow in setntacldacl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.62 by commit...

GSD-2022-1005353 ksmbd: fix heap-based overflow in set_ntacl_dacl()

ksmbd: fix heap-based overflow in setntacldacl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

rsyslog rsyslog7 security update

rsyslog 5.8.10-12.0.2 - Back port fix for heap-based overflow in TCP syslog server - Resolves CVE-2022-24903 Orabug: 34226447 rsyslog7 7.4.10-7.0.1 - Back port fix for heap-based overflow in TCP syslog server - Resolves CVE-2022-24903 Orabug: 34226447...

CVE-2022-36858

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36862

A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36844

A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36842

A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36858

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36863

CVE-2022-36863 is a heap-based overflow in GetCorrectDbLanguageTypeEsPKc of libSDKRecognitionText.spensdk.samsung.so, affecting Samsung mobile SDK prior to the SMR Sep-2022 Release 1. Exploitation could cause a memory access fault; attack path is local and does not require user interaction per th...

CVE-2022-36843

CVE-2022-36843 describes a heap-based overflow in the MHW_RECOG_LIB_INFO function of libSDKRecognitionText.spensdk.samsung.so on Samsung devices. The vulnerability stems from a memory handling issue in the recognition library, potentially leading to memory access faults. Public references point t...

CVE-2022-36843

A heap-based overflow vulnerability in MHWRECOGLIBINFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36846

A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36842

A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36846

CVE-2022-36846 is a heap-based overflow in the ConstructDictionary function of libSDKRecognitionText.spensdk.samsung.so, affecting versions prior to Samsung SMR Sep-2022 Release 1. The overflow can cause memory access faults (memory corruption). The issue is documented across multiple sources (NV...

CVE-2022-36862

A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36841

Affected software: libSDKRecognitionText.spensdk.samsung.so on Samsung devices. Vulnerability: heap-based overflow in PrepareRecogLibrary_Part function prior to SMR Sep-2022 Release 1, causing memory access fault. Exploitability/impact: CVE reports local access with memory impact; no explicit exp...

CVE-2022-36841

A heap-based overflow vulnerability in PrepareRecogLibraryPart function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

PT-2022-23648 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so affected versions not specified Description: A heap-based overflow issue in the HWR::EngJudgeModel::Construct function allows an attacker to cause a memory access fault. Recommendations: At the moment,...

RHEL 9 : rsyslog (RHSA-2022:4795)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4795 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on...