Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2022-0185 vulnerabilities and exploits

(subscribe to this query)

8.4
CVSSv3
CVE 2022-0185
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs...
Linux Linux KernelNetapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -
8.4
CVSSv3
CVE-2022-0185
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs...
Linux Linux KernelNetapp H410c Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -
7.8
CVSSv3
CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle...
Polkit Project PolkitRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Power Little Endian Eus 8.1Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server Eus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 7.7Redhat Enterprise Linux Server Update Services For Sap Solutions 7.6Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 21.10Suse Manager Server 4.1Suse Linux Enterprise Workstation Extension 12Suse Linux Enterprise Desktop 15Suse Enterprise Storage 7.0Suse Manager Proxy 4.1Suse Linux Enterprise High Performance Computing 15.0Suse Linux Enterprise Server 15
5.5
CVE-2021-4155
Kirill Tkhai discovered that the XFS file system implementation in the Linux kernel did not calculate size correctly when pre-allocating space in some situations. A local attacker could use this to expose sensitive information. (CVE-2021-4155) ATTENTION: Due to an unavoidable...
7.8
CVSSv3
CVE-2021-45417
AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow....
Advanced Intrusion Detection Environment Project Advanced Intrusion Detection EnvironmentRedhat Ovirt-node 4.4.10Redhat Virtualization Host 4.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Fedoraproject Fedora 35Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 21.04Canonical Ubuntu Linux 21.10Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7
CVSSv3
CVE-2021-26708
A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK...
Linux Linux KernelNetapp Cloud Backup -Netapp Fas Baseboard Management Controller -Netapp Aff Baseboard Management Controller -Netapp Solidfire \\& Hci Management Node -Netapp Solidfire Baseboard Management Controller -Netapp Baseboard Management Controller 500f FirmwareNetapp Baseboard Management Controller A250 FirmwareNetapp Hci H410c Firmware -
8.6
CVSSv3
CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new...
Docker DockerLinuxfoundation RuncLinuxfoundation Runc 1.0.0Redhat Container Development Kit 3.7Redhat Openshift 3.4Redhat Openshift 3.5Redhat Openshift 3.6Redhat Openshift 3.7Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server 7.0Google Kubernetes Engine -Linuxcontainers LxcHp Onesphere -Netapp Hci Management Node -Netapp Solidfire -Apache MesosOpensuse Backports Sle 15.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3D2iq Kubernetes EngineD2iq Dc\\/osFedoraproject Fedora 30Fedoraproject Fedora 29Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Microfocus Service Management Automation 2018.02Microfocus Service Management Automation 2018.05Microfocus Service Management Automation 2018.08Microfocus Service Management Automation 2018.11
7.8
CVSSv3
CVE-2022-25636
net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload....
Linux Linux KernelDebian Debian Linux 11.0Netapp Baseboard Management Controller H410c -Netapp Baseboard Management Controller H300s -Netapp Baseboard Management Controller H500s -Netapp Baseboard Management Controller H700s -Netapp Baseboard Management Controller H300e -Netapp Baseboard Management Controller H500e -Netapp Baseboard Management Controller H700e -Netapp Baseboard Management Controller H410s -
7.8
CVSSv3
CVE-2021-22555
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space...
Linux Linux KernelBrocade Fabric Operating System -Netapp Fas 8300 Firmware -Netapp Fas 8700 Firmware -Netapp Aff A400 Firmware -Netapp Aff A250 Firmware -Netapp Aff 500f Firmware -Netapp H610c Firmware -Netapp H610s Firmware -Netapp H615c Firmware -Netapp Hci Management Node -Netapp Solidfire -
7.8
CVSSv3
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw...
Linux Linux KernelFedoraproject Fedora 35Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.2Redhat Enterprise Linux For Real Time Tus 8.4Redhat Enterprise Linux For Real Time Tus 8.2Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Real Time For Nfv 8Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Codeready Linux Builder -Redhat Virtualization Host 4.0Ovirt Ovirt-engine 4.4.10.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
arbitrary CVE-2022-2257CVE-2013-4585CVE-2013-4493CVE-2022-26134brute forceSQLCVE-2022-30333CVE-2022-33327
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook