PT-2022-36232

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.78 Description The issue is related to a use-after-free problem for dynamic ftrace ops in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-36080

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.8 Description The issue is related to a use-after-free problem in dynamic ftrace ops. It was introduced in version v4.14 and fixed in Linux Kernel version v6.0.8. The actual impact and attack plausibility ha...

PT-2022-36351 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: The issue is related to a use-after-free problem for dynamic ftrace ops. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2023-15778)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from the fact that input encoded to an invalid CompositeTensorVariant tensor will trigger a segment error in tf...

GLSA-202211-09 : xterm: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202211-09 xterm: Arbitrary Code Execution - xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE...

CVE-2022-45063

A flaw was found in xterm. This issue may allow code execution via font ops...

PT-2022-35715 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 4.19.263 Description: The issue is related to a use-after-free UAF problem in the nfqnl nf hook drop function when ops init fails. This problem was introduced in version v2.6.33 and is fixed in version...

PT-2022-35691 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-35790 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-35863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to v4.14.296,...

PT-2022-35922

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35570

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.150 Description The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35384

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue is related to a use-after-free in the ufx ops open function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-35147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a use-after-free in the ufx ops open function. This problem has been identified but its actual impact and potential for attack have not been confirmed. Recommendations...

Design/Logic Flaw

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

CVE-2022-45063

CVE-2022-45063 affects the xterm terminal emulator, where code execution could occur via font operations, specifically OSC 50 responses that may carry Ctrl‑g and enable command execution within the vi line editing mode of Zsh. Affected: xterm prior to version 375. Several connected advisories ind...

CVE-2022-45063: Improper Neutralization of Special Elements used in a Command

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...