CVE-2022-31751

The CVE-2022-31751 entry concerns a multi-thread contention issue in the kernel emcom module, with availability impact. Connected documents consistently identify HarmonyOS (notably HarmonyOS 2.0) as the affected platform and attribute the problem to resource contention in the kernel emcom module,...

CVE-2022-31763

CVE-2022-31763 relates to Huawei HarmonyOS, describing a kernel-module vulnerability with null-pointer dereference and array-out-of-bounds conditions. The issue is reported to potentially affect system availability if exploited. The Red Hat, NVD, and other feeds reiterate the same kernel-level ro...

CVE-2022-31763

The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability...

CVE-2021-46814

The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability...

CVE-2021-46814

The CVE-2021-46814 entry concerns Huawei HarmonyOS’ video framework, described as having an out-of-bounds memory read/write vulnerability that can affect system availability when exploited. Connected sources corroborate a vulnerability in the video framework with out-of-bounds memory access as th...

PT-2022-20906 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: Communication module affected versions not specified Description: The issue is related to improper permission preservation in the communication module. Successful exploitation may affect system availability. Recommendations: At the moment,...

PT-2022-20902 · Unknown · Kernel Emcom Module

Name of the Vulnerable Software and Affected Versions: kernel emcom module affected versions not specified Description: The issue is related to multi-thread contention in the kernel emcom module. Successful exploitation of this issue may affect system availability. Recommendations: At the moment,...

CVE-2022-31755: Improper Preservation of Permissions

The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability...

Command injection

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

CVE-2022-1708

CVE-2022-1708 affects CRI-O and causes memory or disk exhaustion on the node when handling large output from ExecSync. The vulnerability arises from CRI-O reading the entire command output after execution, which can exhaust node resources and impact availability. Connected advisories indicate aff...

CVE-2022-1708

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

CVE-2022-1708

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

A flaw was found in the npm package "tar" aka node-tar. Extracting tar files that contain two directories and a symlink with names containing Unicode values that normalize to the same value on Windows systems made it possible to bypass node-tar symlink checks on directories. This allows an...

CVE-2022-1708

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

CVE-2022-1708: Uncontrolled Resource Consumption

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a...

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2022-1804)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pip...

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2022-1787)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pip...

SUSE SLED15 / SLES15 Security Update : udisks2 (SUSE-SU-2022:1919-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1919-1 advisory. - A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to...

nodejs-trim-off-newlines: ReDoS via string processing

A flaw was found in nodejs-trim-off-newlines. All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service ReDoS via string processing. The highest threat from this vulnerability is to system availability...

EulerOS 2.0 SP3 : xorg-x11-server (EulerOS-SA-2022-1773)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the...