Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c4e8615f by security tracker role at 2022-03-23T20:10:22+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,243 @@
+CVE-2022-27782
+ RESERVED
+CVE-2022-27781
+ RESERVED
+CVE-2022-27780
+ RESERVED
+CVE-2022-27779
+ RESERVED
+CVE-2022-27778
+ RESERVED
+CVE-2022-27777
+ RESERVED
+CVE-2022-27776
+ RESERVED
+CVE-2022-27775
+ RESERVED
+CVE-2022-27774
+ RESERVED
+CVE-2022-27773
+ RESERVED
+CVE-2022-27772
+ RESERVED
+CVE-2022-27771
+ RESERVED
+CVE-2022-27770
+ RESERVED
+CVE-2022-27769
+ RESERVED
+CVE-2022-27768
+ RESERVED
+CVE-2022-27767
+ RESERVED
+CVE-2022-27766
+ RESERVED
+CVE-2022-27765
+ RESERVED
+CVE-2022-27764
+ RESERVED
+CVE-2022-27763
+ RESERVED
+CVE-2022-27762
+ RESERVED
+CVE-2022-27761
+ RESERVED
+CVE-2022-27760
+ RESERVED
+CVE-2022-27759
+ RESERVED
+CVE-2022-27758
+ RESERVED
+CVE-2022-27757
+ RESERVED
+CVE-2022-27756
+ RESERVED
+CVE-2022-27755
+ RESERVED
+CVE-2022-27754
+ RESERVED
+CVE-2022-27753
+ RESERVED
+CVE-2022-27752
+ RESERVED
+CVE-2022-27751
+ RESERVED
+CVE-2022-27750
+ RESERVED
+CVE-2022-27749
+ RESERVED
+CVE-2022-27748
+ RESERVED
+CVE-2022-27747
+ RESERVED
+CVE-2022-27746
+ RESERVED
+CVE-2022-27745
+ RESERVED
+CVE-2022-27744
+ RESERVED
+CVE-2022-27743
+ RESERVED
+CVE-2022-27742
+ RESERVED
+CVE-2022-27741
+ RESERVED
+CVE-2022-27740
+ RESERVED
+CVE-2022-27739
+ RESERVED
+CVE-2022-27738
+ RESERVED
+CVE-2022-27737
+ RESERVED
+CVE-2022-27736
+ RESERVED
+CVE-2022-27735
+ RESERVED
+CVE-2022-27734
+ RESERVED
+CVE-2022-27733
+ RESERVED
+CVE-2022-27732
+ RESERVED
+CVE-2022-27731
+ RESERVED
+CVE-2022-27730
+ RESERVED
+CVE-2022-27729
+ RESERVED
+CVE-2022-27728
+ RESERVED
+CVE-2022-27727
+ RESERVED
+CVE-2022-27726
+ RESERVED
+CVE-2022-27725
+ RESERVED
+CVE-2022-27724
+ RESERVED
+CVE-2022-27723
+ RESERVED
+CVE-2022-27722
+ RESERVED
+CVE-2022-27721
+ RESERVED
+CVE-2022-27720
+ RESERVED
+CVE-2022-27719
+ RESERVED
+CVE-2022-27718
+ RESERVED
+CVE-2022-27717
+ RESERVED
+CVE-2022-27716
+ RESERVED
+CVE-2022-27715
+ RESERVED
+CVE-2022-27714
+ RESERVED
+CVE-2022-27713
+ RESERVED
+CVE-2022-27712
+ RESERVED
+CVE-2022-27711
+ RESERVED
+CVE-2022-27710
+ RESERVED
+CVE-2022-27709
+ RESERVED
+CVE-2022-27708
+ RESERVED
+CVE-2022-27707
+ RESERVED
+CVE-2022-27706
+ RESERVED
+CVE-2022-27705
+ RESERVED
+CVE-2022-27704
+ RESERVED
+CVE-2022-27703
+ RESERVED
+CVE-2022-27702
+ RESERVED
+CVE-2022-27701
+ RESERVED
+CVE-2022-27700
+ RESERVED
+CVE-2022-27699
+ RESERVED
+CVE-2022-27698
+ RESERVED
+CVE-2022-27697
+ RESERVED
+CVE-2022-27696
+ RESERVED
+CVE-2022-27695
+ RESERVED
+CVE-2022-27694
+ RESERVED
+CVE-2022-27693
+ RESERVED
+CVE-2022-27692
+ RESERVED
+CVE-2022-27691
+ RESERVED
+CVE-2022-27690
+ RESERVED
+CVE-2022-27689
+ RESERVED
+CVE-2022-27688
+ RESERVED
+CVE-2022-27687
+ RESERVED
+CVE-2022-27686
+ RESERVED
+CVE-2022-27685
+ RESERVED
+CVE-2022-27684
+ RESERVED
+CVE-2022-27683
+ RESERVED
+CVE-2022-27682
+ RESERVED
+CVE-2022-27681
+ RESERVED
+CVE-2022-27680
+ RESERVED
+CVE-2022-27679
+ RESERVED
+CVE-2022-27678
+ RESERVED
+CVE-2022-27677
+ RESERVED
+CVE-2022-27676
+ RESERVED
+CVE-2022-27675
+ RESERVED
+CVE-2022-27674
+ RESERVED
+CVE-2022-27673
+ RESERVED
+CVE-2022-27672
+ RESERVED
+CVE-2022-27671
+ RESERVED
+CVE-2022-27670
+ RESERVED
+CVE-2022-27669
+ RESERVED
+CVE-2022-27668
+ RESERVED
+CVE-2022-27667
+ RESERVED
+CVE-2022-1059
+ RESERVED
+CVE-2022-1058
+ RESERVED
+CVE-2022-1057
+ RESERVED
+CVE-2021-46739
+ RESERVED
CVE-2022-27666 (In the Linux kernel before 5.16.15, there is a buffer overflow
in ESP ...)
- linux <unfixed>
NOTE:
https://git.kernel.org/linus/ebe48d368e97d007bfeb76fcb065d6cfc4c96645 (5.17-rc8)
@@ -874,8 +1114,8 @@ CVE-2022-1035 (Segmentation Fault caused by MP4Box -lsr in
GitHub repository gpa
NOTE:
https://github.com/gpac/gpac/commit/3718d583c6ade191dc7979c64f48c001ca6f0243
CVE-2022-1034 (There is a Unrestricted Upload of File vulnerability in ShowDoc
v2.10. ...)
NOT-FOR-US: ShowDoc
-CVE-2022-1033
- RESERVED
+CVE-2022-1033 (Unrestricted Upload of File with Dangerous Type in GitHub
repository c ...)
+ TODO: check
CVE-2022-1032
RESERVED
CVE-2022-1031 (Use After Free in op_is_set_bp in GitHub repository
radareorg/radare2 ...)
@@ -2515,7 +2755,7 @@ CVE-2022-0888
CVE-2022-0887
RESERVED
CVE-2022-0886 [esp: Fix possible buffer overflow in ESP transformation]
- RESERVED
+ REJECTED
- linux <unfixed>
NOTE:
https://git.kernel.org/linus/ebe48d368e97d007bfeb76fcb065d6cfc4c96645 (5.17-rc8)
NOTE: Appears to be a duplicate assignment of CVE-2022-27666
@@ -3140,18 +3380,18 @@ CVE-2022-0864
RESERVED
CVE-2022-0863
RESERVED
-CVE-2022-0862
- RESERVED
-CVE-2022-0861
- RESERVED
+CVE-2022-0862 (A lack of password change protection vulnerability in a
depreciated AP ...)
+ TODO: check
+CVE-2022-0861 (A XML Extended entity vulnerability in McAfee Enterprise
ePolicy Orche ...)
+ TODO: check
CVE-2022-0860 (Improper Authorization in GitHub repository cobbler/cobbler
prior to 3 ...)
- cobbler <removed>
-CVE-2022-0859
- RESERVED
-CVE-2022-0858
- RESERVED
-CVE-2022-0857
- RESERVED
+CVE-2022-0859 (McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10
Update 13 a ...)
+ TODO: check
+CVE-2022-0858 (A cross-site scripting (XSS) vulnerability in McAfee Enterprise
ePolic ...)
+ TODO: check
+CVE-2022-0857 (A reflected cross-site scripting (XSS) vulnerability in McAfee
Enterpr ...)
+ TODO: check
CVE-2022-0856 (libcaca is affected by a Divide By Zero issue via img2txt,
which allow ...)
- libcaca <unfixed> (unimportant)
NOTE: https://github.com/cacalabs/libcaca/issues/65
@@ -3314,8 +3554,8 @@ CVE-2022-0843
RESERVED
- firefox 98.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2022-10/#CVE-2022-0843
-CVE-2022-0842
- RESERVED
+CVE-2022-0842 (A blind SQL injection vulnerability in McAfee Enterprise
ePolicy Orche ...)
+ TODO: check
CVE-2022-0841 (OS Command Injection in GitHub repository ljharb/npm-lockfile
in v2.0. ...)
NOT-FOR-US: ljharb/npm-lockfile
CVE-2022-0840
@@ -3646,8 +3886,8 @@ CVE-2022-26245
RESERVED
CVE-2022-26244
RESERVED
-CVE-2022-26243
- RESERVED
+CVE-2022-26243 (Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a
buffer ove ...)
+ TODO: check
CVE-2022-26242
RESERVED
CVE-2022-26241
@@ -6340,8 +6580,7 @@ CVE-2022-0637
RESERVED
CVE-2022-0636
RESERVED
-CVE-2022-0635 [DNAME insist with synth-from-dnssec enabled]
- RESERVED
+CVE-2022-0635 (Versions affected: BIND 9.18.0 When a vulnerable version of
named rece ...)
- bind9 1:9.18.1-1
[bullseye] - bind9 <not-affected> (Vulnerable code introduced later)
[buster] - bind9 <not-affected> (Vulnerable code introduced later)
@@ -9904,8 +10143,7 @@ CVE-2022-24071 (A Built-in extension in Whale browser
before 3.12.129.46 allows
NOT-FOR-US: Whale browser
CVE-2022-24070
RESERVED
-CVE-2022-0396 [DoS from specifically crafted TCP packets]
- RESERVED
+CVE-2022-0396 (BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions
9.16.11-S ...)
- bind9 1:9.18.1-1
[bullseye] - bind9 1:9.16.27-1~deb11u1
[buster] - bind9 <not-affected> (Vulnerable code introduced later)
@@ -13105,8 +13343,8 @@ CVE-2022-23244
RESERVED
CVE-2022-23243
RESERVED
-CVE-2022-23242
- RESERVED
+CVE-2022-23242 (TeamViewer Linux versions before 15.28 do not properly execute
a delet ...)
+ TODO: check
CVE-2022-23241
RESERVED
CVE-2022-23240
@@ -16220,8 +16458,8 @@ CVE-2022-22318
RESERVED
CVE-2022-22317
RESERVED
-CVE-2022-22316
- RESERVED
+CVE-2022-22316 (IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an
authenticated and a ...)
+ TODO: check
CVE-2022-22315
RESERVED
CVE-2022-22314
@@ -16410,8 +16648,8 @@ CVE-2021-46066
RESERVED
CVE-2021-46065 (A Cross-site scripting (XSS) vulnerability in Secondary Email
Field in ...)
NOT-FOR-US: Zoho ManageEngine
-CVE-2021-46064
- RESERVED
+CVE-2021-46064 (IrfanView 4.59 is vulnerable to buffer overflow via the
function at ad ...)
+ TODO: check
CVE-2021-46063 (MCMS v5.2.5 was discovered to contain a Server Side Template
Injection ...)
NOT-FOR-US: MCMS
CVE-2021-46062 (MCMS v5.2.5 was discovered to contain an arbitrary file
deletion vulne ...)
@@ -17563,10 +17801,10 @@ CVE-2021-45759
RESERVED
CVE-2021-45758
RESERVED
-CVE-2021-45757
- RESERVED
-CVE-2021-45756
- RESERVED
+CVE-2021-45757 (ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer
overflow in ...)
+ TODO: check
+CVE-2021-45756 (Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300
<3.0.0.4.384.8207 ...)
+ TODO: check
CVE-2021-45755
RESERVED
CVE-2021-45754
@@ -21246,8 +21484,8 @@ CVE-2021-23170
RESERVED
CVE-2021-23148
RESERVED
-CVE-2021-44759
- RESERVED
+CVE-2021-44759 (Improper Authentication vulnerability in TLS origin validation
of Apac ...)
+ TODO: check
CVE-2021-4088 (SQL injection vulnerability in Data Loss Protection (DLP) ePO
extensio ...)
NOT-FOR-US: McAfee
CVE-2021-4087
@@ -23171,8 +23409,8 @@ CVE-2021-44141 (All versions of Samba prior to 4.15.5
are vulnerable to a malici
NOTE: https://bugzilla.samba.org/show_bug.cgi?id=14911
CVE-2021-44140 (Remote attackers may delete arbitrary files in a system
hosting a JSPW ...)
- jspwiki <removed>
-CVE-2021-44139
- RESERVED
+CVE-2021-44139 (Sentinel 1.8.2 is vulnerable to Server-side request forgery
(SSRF). ...)
+ TODO: check
CVE-2021-44138
RESERVED
CVE-2021-44137
@@ -23480,8 +23718,8 @@ CVE-2021-3983 (kimai2 is vulnerable to Improper
Neutralization of Input During W
NOT-FOR-US: kimai2
CVE-2022-21742
RESERVED
-CVE-2021-44040
- RESERVED
+CVE-2021-44040 (Improper Input Validation vulnerability in request line
parsing of Apa ...)
+ TODO: check
CVE-2021-44039
RESERVED
CVE-2021-44038 (An issue was discovered in Quagga through 1.2.4. Unsafe
chown/chmod op ...)
@@ -25439,14 +25677,14 @@ CVE-2021-43740
RESERVED
CVE-2021-43739
RESERVED
-CVE-2021-43738
- RESERVED
-CVE-2021-43737
- RESERVED
-CVE-2021-43736
- RESERVED
-CVE-2021-43735
- RESERVED
+CVE-2021-43738 (An issue was discovered in xiaohuanxiong CMS 5.0.17. There is
a CSRF v ...)
+ TODO: check
+CVE-2021-43737 (An issus was discovered in xiaohuanxiong CMS 5.0.17. There is
a CSRF v ...)
+ TODO: check
+CVE-2021-43736 (CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE)
vulnera ...)
+ TODO: check
+CVE-2021-43735 (CmsWing 1.3.7 is affected by a SQLi vulnerability via
parameter: behav ...)
+ TODO: check
CVE-2021-43734 (kkFileview v4.0.0 has arbitrary file read through a directory
traversa ...)
NOT-FOR-US: kkFileview
CVE-2021-43733
@@ -39955,8 +40193,8 @@ CVE-2021-38774
RESERVED
CVE-2021-38773
RESERVED
-CVE-2021-38772
- RESERVED
+CVE-2021-38772 (Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a
buffer ove ...)
+ TODO: check
CVE-2021-38771
RESERVED
CVE-2021-38770
@@ -41213,8 +41451,8 @@ CVE-2021-38280
RESERVED
CVE-2021-38279
RESERVED
-CVE-2021-38278
- RESERVED
+CVE-2021-38278 (Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a
buffer ove ...)
+ TODO: check
CVE-2021-38277
RESERVED
CVE-2021-38276
@@ -74347,8 +74585,7 @@ CVE-2021-25222
RESERVED
CVE-2021-25221
RESERVED
-CVE-2021-25220 [DNS forwarders - cache poisoning vulnerability]
- RESERVED
+CVE-2021-25220 (BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 ->
9.18.0 BIN ...)
{DSA-5105-1 DLA-2955-1}
- bind9 1:9.18.1-1
NOTE: https://kb.isc.org/docs/cve-2021-25220
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c4e8615f9f0abb444ed954b6726176cefe156245
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c4e8615f9f0abb444ed954b6726176cefe156245
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
