TI-2022-03243 CVE-2022-3515 · GHSA-58wq-p76f-6qjh
Integer overflow in libksba
Priority HIGH 82
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser.
RHSA-2022:8598
Red Hat Virtualization Host security update [ovirt-4.5.3-1]
Released 2022-11-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202211170828_8.6, redhat-virtualization-host-image-update-4.5.3-202211170828_8.6
Fixes 5 records
TI-2022-17871 CVE-2022-38177 · GHSA-5vfq-rv44-c5ff
Memory leak in ECDSA DNSSEC verification code
Priority MEDIUM 45
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak.
TI-2022-17872 CVE-2022-38178 · GHSA-349w-cgp3-287r
Memory leaks in EdDSA DNSSEC verification code
Priority MEDIUM 44
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak.
TI-2022-19311 CVE-2022-40674 · GHSA-2vq2-xc55-3j5m
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
Priority MEDIUM 42
libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.
TI-2022-20314 CVE-2022-41974 · GHSA-46cw-54vx-86g5
multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root…
Priority LOW 35
multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973.