Skip to content
OpenAdvisories
Medium WID-SEC-2022-2052 9 CVEs

Mehrere Red Hat Enterprise Linux Pakete: Mehrere Schwachstellen

Published Nov 15, 2022 · Updated Apr 29, 2025 · Revision 6 · de-DE

Vendor: amazon Vendor: Oracle Vendor: Red Hat Product: Enterprise Linux Product: Linux Product: Linux 2 Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 9

  • High 7.8
    CVE-2022-3787

    A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root…

  • High 7.5
    CVE-2021-46828

    In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc becaus…

    libtirpc libtirpc ntirpc libtirpc Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-26125

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isis…

    frr frr frr Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2022-1706

    Ignition config accessible to unprivileged software on VMware

    A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from th…

    cluster-api-aws-controller ignition ignition github.com/coreos/ignition/v2 Debian Ubuntu Wolfi Go
  • Medium 6.2
    CVE-2022-23645

    Out-of-bounds read in swtpm

    swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface. Versions prior to 0.5.3, 0.6.2, and 0.7.1 are vulnerable to out-of-bounds read. A specially crafted header of swtpm's state, where the blobheader's hdrsize indicato…

    stefanberger swtpm swtpm Debian
  • Medium 5.9
    CVE-2022-29162

    Incorrect Default Permissions in runc

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an aty…

    opencontainers runc ctop podman Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.1
    CVE-2022-3500

    Keylime: unhandled exceptions could lead to invalid attestation states

    A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that …

    keylime PyPI
  • Unscored —
    CVE-2020-23903

    A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial…

    speex speex Debian Ubuntu
  • Unscored —
    CVE-2022-33068

    An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of S…

    openjdk-9 qtwebengine-opensource-src qt6-base harfbuzz Debian Ubuntu Alpine

Revision history

  1. #6

    Neue Updates von Amazon aufgenommen

  2. #5

    Referenz(en) aufgenommen: FEDORA-2022-7A312CDE45, FEDORA-2022-8AD3246CC0

  3. #4

    Neue Updates von Oracle Linux aufgenommen

  4. #3

    Neue Updates von Oracle Linux aufgenommen

  5. #2

    Neue Updates von Oracle Linux aufgenommen

  6. #1

    Initiale Fassung

References