Skip to contentDebian Linux vulnerabilities
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can...CVE-2022-42309Fix available8.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +2 moreImportant: virt:rhel and virt-devel:rhel security and bug fix updateCVE-2022-40284Fix available7.8 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1...CVE-2022-43750Fix available6.7 Medium
- twisted, debian linux +1 moreTwisted vulnerable to NameVirtualHost Host header injectionCVE-2022-39348Fix available5.4 Medium
- jupyter core, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in JupyterAppCVE-2022-39286Fix available8.8 High
- unspecified vim, debian linux, fedoraproject fedora +1 more +3 morevim autocmd quickfix.c qf_update_buffer use after freeCVE-2022-3705Fix available5.0 Medium
- apache batik, apache software foundation xml graphics, debian linux +2 moreApache Batik prior to 1.16 allows RCE via scriptingCVE-2022-42890Fix available7.5 High
- apache batik, apache software foundation xml graphics, debian linux +2 moreApache Batik prior to 1.16 allows RCE when loading untrusted SVG inputCVE-2022-41704Fix available7.5 High
- opensvc multipath-tools, debian linux, fedoraproject fedora +2 moremultipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as...CVE-2022-41974Fix available7.8 High
- opensvc multipath-tools, debian linux, fedoraproject fedora +2 moremultipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as...CVE-2022-41973Fix available7.8 High
- libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 moreIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...CVE-2022-43680Public exploitFix available7.5 High
- gnu libtasn1, debian linux, fedoraproject fedora +3 more +5 moreGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...CVE-2021-46848Fix available9.1 Critical
- debian linux, extended keccak code package project keccak code package, fedoraproject fedora +9 more +11 moreBuffer overflow in sponge queue functionsCVE-2022-37454Fix available9.8 Critical
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreLinux Kernel BPF inode.c nilfs_new_inode use after freeCVE-2022-3649Fix available3.1 Low
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel BPF segment.c nilfs_attach_log_writer memory leakCVE-2022-3646Fix available3.1 Low
- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after freeCVE-2022-3640Fix available5.5 Medium
- debian linux, linux kernel +1 moreLinux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after freeCVE-2022-36365.1 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPsec idt77252.c tst_timer use after freeCVE-2022-3635Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel transport.c j1939_session_destroy memory leakCVE-2022-3633Fix available3.5 Low
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel af_vsock.c vsock_connect memory leakCVE-2022-3629Fix available2.6 Low
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called...CVE-2022-3627Fix available5.5 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called...CVE-2022-3626Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPsec devlink.c devlink_param_get use after freeCVE-2022-3625Fix available4.6 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing...CVE-2022-3599Fix available5.5 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c...CVE-2022-3598Fix available5.5 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called...CVE-2022-3597Fix available5.5 Medium
- libtiff, debian linux +1 moreMultiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows...CVE-2022-3570Fix available7.7 High
- debian linux, linux kernel +1 moreLinux Kernel BPF gup.c follow_page_pte race conditionCVE-2022-3623Fix available5.0 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereferenceCVE-2022-3621Fix available4.3 Medium
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41742CVE-2022-41742Fix available7.1 High
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41741CVE-2022-41741Public exploitFix available7.0 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the...CVE-2022-3586Fix available5.5 Medium
- git, apple xcode, debian linux +1 more +3 moreGit vulnerable to Remote Code Execution via Heap overflow in `git shell`CVE-2022-39260Fix available8.5 High
- git, apple xcode, debian linux +1 more +3 moreGit subject to exposure of sensitive information via local clone of symbolic linksCVE-2022-39253Public exploitFix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel BPF r8152.c intr_callback logging of excessive dataCVE-2022-3594Fix available5.3 Medium
- jhead project jhead, debian linux, fedoraproject fedora +2 moreJhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG...CVE-2022-41751Fix available7.8 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after freeCVE-2022-3564Public exploitFix available5.5 Medium
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c ProcXkbGetKbdByName memory leakCVE-2022-3551Fix available3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c _GetCountedString buffer overflowCVE-2022-3550Fix available5.5 Medium
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel IPsec nfp_cppcore.c area_cache_get use after freeCVE-2022-3545Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel libbpf btf_dump.c btf_dump_name_dups use after freeCVE-2022-3534Fix available5.1 Medium
- isaacs minimatch, debian linux, fedoraproject fedora +2 moreminimatch ReDoS vulnerabilityCVE-2022-3517Fix available7.5 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPv6 ipv6_renew_options memory leakCVE-2022-3524Fix available4.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel kcm kcmsock.c kcm_tx_work race conditionCVE-2022-3521Fix available2.6 Low
- powerline gitstatus project gitstatus, debian linux +1 morePowerline Gitstatus vulnerable to arbitrary code executionCVE-2022-42906Fix available7.8 High
- linaro lava, debian linux +1 moreIn Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code...CVE-2022-42902Fix available8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreIn the Linux kernel 5.8 through 5.19.14, local attackers able to inject WLAN frames into the...CVE-2022-42722Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19...CVE-2022-42721Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreVarious refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1...CVE-2022-42720Fix available7.8 High
- Show moreLoading…