deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-37112
Published: 2022-08-23
Description: BlueCMS 1.6 has SQL injection in line 55 of admin/model.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/seizer-zyx/Vulnerability/issues/2; https://github.com/seizer-zyx/Vulnerability/issues/2
CVE: CVE-2022-37113
Published: 2022-08-23
Description: Bluecms 1.6 has SQL injection in line 132 of admin/area.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/seizer-zyx/Vulnerability/issues/3; https://github.com/seizer-zyx/Vulnerability/issues/3
CVE: CVE-2022-2946
Published: 2022-08-23
Description: Use After Free in GitHub repository vim/vim prior to 9.0.0246.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/vim/vim/commit/adce965162dd89bf29ee0e5baf53652e7515762c; https://huntr.dev/bounties/5d389a18-5026-47df-a5d0-1548a9b555d5; https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE: CVE-2022-37428
Published: 2022-08-23
Description: PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-459
References: https://docs.powerdns.com/recursor/lua-config/protobuf.html; https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-02.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXSREJKTT6RNE3GXQENQ4R4HS37UNSPX/
CVE: CVE-2022-38663
Published: 2022-08-23
Description: Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/08/23/2; https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2796; http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE: CVE-2022-38664
Published: 2022-08-23
Description: Jenkins Job Configuration History Plugin 1165.v8cc9fd1f4597 and earlier does not escape the job name on the System Configuration History page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure job names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/08/23/2; https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2765; http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE: CVE-2022-38665
Published: 2022-08-23
Description: Jenkins CollabNet Plugins Plugin 2.0.8 and earlier stores a RabbitMQ password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/08/23/2; https://www.jenkins.io/security/advisory/2022-08-23/#SECURITY-2157; http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE: CVE-2022-1513
Published: 2022-08-23
Description: A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafted website.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78, CWE-78
References: https://iknow.lenovo.com.cn/detail/dc_203545.html; https://iknow.lenovo.com.cn/detail/dc_203545.html
CVE: CVE-2022-35115
Published: 2022-08-23
Description: IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://support.icewarp.com/hc/en-us/community/posts/[PII_REDACTED]297-DC2-Update-2-Build-10-13-0-2-10-; https://veysel-xan.com/CVE-2022-35115.txt; https://support.icewarp.com/hc/en-us/community/posts/[PII_REDACTED]297-DC2-Update-2-Build-10-13-0-2-10-
CVE: CVE-2022-38172
Published: 2022-08-23
Description: ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1122640; https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1122640
CVE: CVE-2022-38463
Published: 2022-08-23
Description: ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1156793; https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1156793
CVE: CVE-2020-35511
Published: 2022-08-23
Description: A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-126, CWE-119
References: http://www.libpng.org/pub/png/apps/pngcheck.html; https://lists.debian.org/debian-lts-announce/2022/12/msg00024.html; https://www.debian.org/security/2022/dsa-5300
CVE: CVE-2020-35515
Published: 2022-08-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-35516
Published: 2022-08-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-3917
Published: 2022-08-23
Description: A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://access.redhat.com/security/cve/CVE-2021-3917; https://bugzilla.redhat.com/show_bug.cgi?id=2018478; https://github.com/coreos/coreos-installer/commit/2a36405339c87b16ed6c76e91ad5b76638fbdb0c
CVE: CVE-2021-3975
Published: 2022-08-23
Description: A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2021-3975; https://bugzilla.redhat.com/show_bug.cgi?id=2024326; https://github.com/libvirt/libvirt/commit/1ac703a7d0789e46833f4013a3876c2e3af18ec7
CVE: CVE-2021-3995
Published: 2022-08-23
Description: A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552, CWE-552
References: http://packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.html; http://seclists.org/fulldisclosure/2022/Dec/4; http://www.openwall.com/lists/oss-security/2022/11/30/2
CVE: CVE-2021-3996
Published: 2022-08-23
Description: A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552, CWE-552
References: http://packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.html; http://seclists.org/fulldisclosure/2022/Dec/4; http://www.openwall.com/lists/oss-security/2022/11/30/2
CVE: CVE-2021-3997
Published: 2022-08-23
Description: A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674, CWE-674
References: https://access.redhat.com/security/cve/CVE-2021-3997; https://bugzilla.redhat.com/show_bug.cgi?id=2024639; https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c[PII_REDACTED]ce4a5b5c6a1
CVE: CVE-2022-2938
Published: 2022-08-23
Description: A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to crash the system or have other memory-corruption side effects.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a06247c6804f1a7c86a2e5398a4c1f1db1471848; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a06247c6804f1a7c86a2e5398a4c1f1db1471848
CVE: CVE-2022-31676
Published: 2022-08-23
Description: VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2022/08/23/3; https://lists.debian.org/debian-lts-announce/2022/08/msg00013.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C5VV2R4LV4T3SNQJYRLFD4C75HBDVV76/
CVE: CVE-2022-38132
Published: 2022-08-24
Description: Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL construction arguments, allowing URL redirection to an arbitrary server, downloading an arbitrary script file, and eventually executing the file in the device. This issue affects: Linksys MR8300 Router 1.0.
CVSS Score: 8.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://downloads.linksys.com/support/assets/releasenotes/MR8300_1.1.10.210186_Customer_ReleaseNotes.txt; https://downloads.linksys.com/support/assets/releasenotes/MR8300_1.1.10.210186_Customer_ReleaseNotes.txt
CVE: CVE-2022-24375
Published: 2022-08-24
Description: The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/node-opcua/node-opcua/commit/3fd46ec156e7718a506be41f3916310b6bdd0407; https://github.com/node-opcua/node-opcua/commit/7b5044b3f5866fbedc3efabd05e407352c07bd2f; https://github.com/node-opcua/node-opcua/pull/1182
CVE: CVE-2022-25903
Published: 2022-08-24
Description: The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/locka99/opcua/pull/216; https://github.com/locka99/opcua/pull/216/commits/e75dada28a40c3fefc4aeee4cdc272e1b748f8dd; https://security.snyk.io/vuln/SNYK-RUST-OPCUA-2988750
CVE: CVE-2022-36945
Published: 2022-08-24
Description: The Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations and force a resynchronization after capturing three consecutive valid key-fob signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-294
References: https://hackaday.com/2022/08/17/rollback-breaks-into-your-car/; https://medium.com/codex/rollback-a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-df5f99ba9490; https://www.blackhat.com/us-22/briefings/schedule/#rollback---a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-27185
CVE: CVE-2022-37305
Published: 2022-08-24
Description: The Remote Keyless Entry (RKE) receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations and force a resynchronization after capturing five consecutive valid RKE signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-294
References: https://hackaday.com/2022/08/17/rollback-breaks-into-your-car/; https://medium.com/codex/rollback-a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-df5f99ba9490; https://www.blackhat.com/us-22/briefings/schedule/#rollback---a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-27185
CVE: CVE-2022-37418
Published: 2022-08-24
Description: The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-294
References: https://hackaday.com/2022/08/17/rollback-breaks-into-your-car/; https://medium.com/codex/rollback-a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-df5f99ba9490; https://www.blackhat.com/us-22/briefings/schedule/#rollback---a-new-time-agnostic-replay-attack-against-the-automotive-remote-keyless-entry-systems-27185
CVE: CVE-2022-37333
Published: 2022-08-24
Description: SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://exment.net/docs/#/release_note?id=v[PII_REDACTED]7; https://exment.net/docs/#/weakness/20220817; https://jvn.jp/en/jp/JVN46239102/index.html
CVE: CVE-2022-38078
Published: 2022-08-24
Description: Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://jvn.jp/en/jp/JVN57728859/index.html; https://movabletype.org/news/2022/08/mt-795-687-released.html; https://jvn.jp/en/jp/JVN57728859/index.html
CVE: CVE-2022-38080
Published: 2022-08-24
Description: Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exment.net/docs/#/release_note?id=v[PII_REDACTED]7; https://exment.net/docs/#/weakness/20220817; https://jvn.jp/en/jp/JVN46239102/index.html
CVE: CVE-2022-38089
Published: 2022-08-24
Description: Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exment.net/docs/#/release_note?id=v[PII_REDACTED]7; https://exment.net/docs/#/weakness/20220817; https://jvn.jp/en/jp/JVN46239102/index.html
CVE: CVE-2022-27812
Published: 2022-08-24
Description: Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.
CVSS Score: 7.5 (HIGH)
References: https://advisories.stormshield.eu/2022-009/; https://advisories.stormshield.eu/2022-009/
CVE: CVE-2022-33172
Published: 2022-08-24
Description: de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/BSI-Bund/de.fac2; https://github.com/BSI-Bund/de.fac2/commit/d3c93c620850183d83ba9a0f5944d44a2ee30250; https://github.com/BSI-Bund/de.fac2
CVE: CVE-2022-36633
Published: 2022-08-24
Description: Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/168477/Teleport-10.1.1-Remote-Code-Execution.html; https://github.com/gravitational/teleport; https://packetstormsecurity.com/files/168137/Teleport-9.3.6-Command-Injection.html
CVE: CVE-2022-37153
Published: 2022-08-24
Description: An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Fjowel/CVE-2022-37153; https://github.com/Fjowel/CVE-2022-37153
CVE: CVE-2021-0698
Published: 2022-08-24
Description: In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-236848165
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2021-0887
Published: 2022-08-24
Description: In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-236848817
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2021-0891
Published: 2022-08-24
Description: An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Android SoCAndroid ID: A-236849490
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2021-0946
Published: 2022-08-24
Description: The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and then copies the buffer to userspace. The method PMR_PDumpSymbolicAddr may fail, and if it does the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236846966
CVSS Score: 7.5 (HIGH)
CWE: CWE-909
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2021-0947
Published: 2022-08-24
Description: The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies the buffer to userspace. The method TLServerDiscoverStreamsKM may fail for several reasons including invalid sizes. If this method fails the buffer will be left uninitialized and despite the error will still be copied to userspace. Kernel leak of uninitialized heap data with no privs required.Product: AndroidVersions: Android SoCAndroid ID: A-236838960
CVSS Score: 7.5 (HIGH)
CWE: CWE-909
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2021-39815
Published: 2022-08-24
Description: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232440670
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2022-20122
Published: 2022-08-24
Description: The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption.Product: AndroidVersions: Android SoCAndroid ID: A-232441339
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2022-08-01; https://source.android.com/security/bulletin/2022-08-01
CVE: CVE-2020-35520
Published: 2022-08-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-3488
Published: 2022-08-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-3998
Published: 2022-08-24
Description: A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-252
References: https://access.redhat.com/security/cve/CVE-2021-3998; https://bugzilla.redhat.com/show_bug.cgi?id=2024633; https://security-tracker.debian.org/tracker/CVE-2021-3998
CVE: CVE-2021-3999
Published: 2022-08-24
Description: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-193, CWE-193
References: https://access.redhat.com/security/cve/CVE-2021-3999; https://bugzilla.redhat.com/show_bug.cgi?id=2024637; https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html