CVE-2022-1128

Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page...

CVE-2022-22217

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service DoS. The issue is caused by malformed MLD packets looping on a multi-homed Ethernet Segme...

CVE-2022-21550: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.36 and prior, 7.5.26 and prior, 7.6.22 and prior and and 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Detailed Report: https://oss-fuzz.com/testcase?key=5599629583974400 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6080000135a8 Crash State: Segment::write...

DEBIAN-CVE-2022-2047

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario...

CVE-2022-2047

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario...

CVE-2022-2047

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario...

PT-2022-3912 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.18.13 Description: The issue is related to the clear bss function in the Linux kernel, which is associated with errors in clearing the initial symbol of the block .bss. This can allow an attacker to cause a...

Advantech iView findCfgDeviceListDetailsExport segment SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When...

Advantech iView findCfgDeviceList segment SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet endpoint, which listens on TCP port 8080 by default. When parsing the...

GSD-2022-1003256 SUNRPC: Trap RDMA segment overflows

SUNRPC: Trap RDMA segment overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit ea26bf5eca1459b5a7824997d7823409ce38214e,...

GSD-2022-1003116 mmc: jz4740: Apply DMA engine limits to maximum segment size

mmc: jz4740: Apply DMA engine limits to maximum segment size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002952 SUNRPC: Trap RDMA segment overflows

SUNRPC: Trap RDMA segment overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit 812c13521d4a72469c78ce06d8cdc8dc5b5557b5,...

GSD-2022-1002823 mmc: jz4740: Apply DMA engine limits to maximum segment size

mmc: jz4740: Apply DMA engine limits to maximum segment size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002606 SUNRPC: Trap RDMA segment overflows

SUNRPC: Trap RDMA segment overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit 659f7568e09593945c221bf20217a82ebdfe1328, ...

PT-2022-31882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the DMA engine limits in the Linux Kernel, specifically affecting the maximum segment size. The actual impact and potential for attack have not been proven yet...

PT-2022-31086

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the DMA engine limits in the Linux Kernel, specifically affecting the maximum segment size. The actual impact and potential for attack have not been proven yet...

PT-2022-31215

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue concerns a potential overflow in the RDMA segment of SUNRPC. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31379

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the mmc: jz4740 component, where DMA engine limits are not applied to the maximum segment size. This could potentially lead to security vulnerabilities, although the...

PT-2022-31519

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.46 Description The issue concerns a potential overflow in the SUNRPC Trap RDMA segment. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5....