huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2022-0168: kernel: smb2_ioctl_query_info NULL pointer dereference
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-03-09T15:00:00+00:00

A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.


Affected upstream versions: Affects v5.4–5.12, v5.13-rc+HEAD
Fixed upstream versions: v5.18
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: d6f5e358452479fa8a773b5c6ccc9e4ec5a20880
CVE-2022-0185: kernel: fs_context: heap overflow in legacy parameter handling
Component: kernel
Severity: Important
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-01-18T18:41:00+00:00

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 8.4 GA onwards. Previous Red Hat Enterprise Linux versions are not affected.

Affected upstream versions: 8.4
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 722d94847de2
CVE-2022-0207: vdsm: disclosure of sensitive values in log files
Component: vdsm
Severity: Low
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 3.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)
Public date: 2022-01-11T10:54:00+00:00

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.


Affected upstream versions: Fixed in v4.50.0.4
Upstream repository: https://gerrit.ovirt.org/vdsm.git
Upstream fix commit: 53b0036fc72d3b8877d4e7f047d705e5a4c722e8
CVE-2022-0235: node-fetch: exposure of sensitive information to an unauthorized actor
Component: node-fetch
Severity: Moderate
CWE: CWE-601 (URL Redirection to Untrusted Site ('Open Redirect'))
CVSS v3: 6.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N)
Public date: 2022-01-14T00:00:00+00:00

A flaw was found in node-fetch. When following a redirect to a third-party domain, node-fetch was forwarding sensitive headers such as "Authorization," "WWW-Authenticate," and "Cookie" to potentially untrusted targets. This flaw leads to the exposure of sensitive information to an unauthorized actor.

Statement: This flaw is out of support scope for dotnet-5.0. For more information about Dotnet product support scope, please see https://access.redhat.com/support/policy/updates/net-core

Affected upstream versions: unspecified < 3.1.1
Fixed upstream versions: 3.1.1
Upstream repository: https://github.com/node-fetch/node-fetch
Upstream fix commit: 36e47e8a6406185921e4985dcbeff140d73eaa10
CVE-2022-0261: vim: Heap-based buffer overflow in block_insert() in src/ops.c
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-01-18T00:00:00+00:00

A heap based out-of-bounds write flaw was found in vim's ops.c. This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write. This vulnerability is capable of crashing software, modify memory, and possible code execution.

Statement: Red Hat Enterprise Linux 6 and 7 are not affected because the vulnerable code is not present in our code base.

Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 9f8c304c8a390ade133bac29963dc8e56ab14cbc
CVE-2022-0286: kernel: Local denial of service in bond_ipsec_add_sa
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.1 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-07-06T00:00:00+00:00

A NULL pointer dereference flaw was found in the Linux kernel’s bonding driver in the way a user bonds non existing  or fake device. This flaw allows a local user to crash the system, causing a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v5.14
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 105cd17a866017b45f3c45901b394c711c97bf40
CVE-2022-0318: vim: Heap-based buffer overflow in utf_head_off() in mbyte.c
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 6.6 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Public date: 2022-01-18T00:00:00+00:00

A flaw was found in vim.  The vulnerability occurs due to reading beyond the end of a line in the utf_head_off function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 57df9e8a9f9ae1aafdde9b86b10ad907627a87dc
CVE-2022-0322: kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c
Component: kernel
Severity: Moderate
CWE: CWE-681 (Incorrect Conversion between Numeric Types)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-10-14T00:00:00+00:00

A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).


Affected upstream versions: kernel 5.15 rc6
Fixed upstream versions: v5.15
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: a2d859e3fc97e79d907761550dbc03ff1b36479c
CVE-2022-0358: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405
Component: QEMU
Severity: Moderate
CWE: CWE-273 (Improper Check for Dropped Privileges)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-01-25T00:00:00+00:00

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.

Statement: This issue does not affect the versions of the `qemu-kvm` package as shipped with Red Hat Enterprise Linux 6 and 7. Virtio-fs is a fairly new feature (introduced upstream in QEMU v5.0) which is not built in Red Hat Enterprise Linux 6 and 7.

Affected upstream versions: Fixed in qemu v6.2.0-7
Fixed upstream versions: v7.0.0
Upstream repository: https://gitlab.com/qemu-project/qemu
Upstream fix commit: 449e8171f96a6a944d1f3b7d3627ae059eae21ca
CVE-2022-0359: vim: Heap-based buffer overflow in init_ccline() in ex_getln.c
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-01-24T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to Illegal memory access with large 'tabstop' in Ex mode, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 85b6747abc15a7a81086db31289cf1b8b17e6cb1
CVE-2022-0361: vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-01-24T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to illegal memory access when copying lines in visual mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: dc5490e2cbc8c16022a23b449b48c1bd0083f366
CVE-2022-0392: vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c
Component: vim
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-01-25T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to illegal memory access with bracketed paste in Ex mode and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 806d037671e133bd28a7864248763f643967973a
CVE-2022-0413: vim: Use after free in src/ex_cmds.c
Component: vim
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-01-30T00:00:00+00:00

A flaw was found in vim. The vulnerability occurs due to using freed memory when the substitute uses a recursive function call, resulting in a use-after-free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 37f47958b8a2a44abc60614271d9537e7f14e51a
CVE-2022-0480: kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion
Component: kernel
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-01-03T00:00:00+00:00

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.


Affected upstream versions: Not Known
Fixed upstream versions: v5.15
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 0f12156dff2862ac54235fc72703f18770769042
CVE-2022-0485: libnbd: nbdcopy: missing error handling may create corrupted destination image
Component: libnbd
Severity: Moderate
CWE: CWE-252 (Unchecked Return Value)
CVSS v3: 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2022-01-27T00:00:00+00:00

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.


Affected upstream versions: Fixed in libnbd v1.11.8
Fixed upstream versions: v1.11.8
Upstream repository: https://gitlab.com/nbdkit/libnbd
Upstream fix commit: 8d444b41d09a700c7ee6f9182a649f3f2d325abb
CVE-2022-0492: kernel: cgroups v1 release_agent feature may allow privilege escalation
Component: kernel
Severity: Important
CWE: CWE-862 (Missing Authorization)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-02-07T00:00:00+00:00

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

Statement: In the OpenShift Container Platform (OCP) the container escape and privilege escalation caused by the CVE-2022-0492 vulnerability are blocked by the SELinux policy enabled (by default) on the OCP cluster nodes.

Red Hat Virtualization requires SELinux running in enforcing mode[1] on all hypervisors and managers, which blocks this vulnerability.

1. https://access.redhat.com/solutions/499473

Affected upstream versions: kernel 5.17 rc3
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 24f6008564183aa120d07c03d9289519c2fe02af
CVE-2022-0500: kernel: Linux ebpf logic vulnerability leads to critical memory read and write gaining root privileges
Component: kernel
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-01-14T00:00:00+00:00

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.


Affected upstream versions: Linux kernel 5.17-rc1
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 20b2aff4bc15bda809f994761d5719827d66c0b4
CVE-2022-0512: nodejs-url-parse: authorization bypass through user-controlled key
Component: nodejs-url-parse
Severity: Important
CWE: CWE-639 (Authorization Bypass Through User-Controlled Key)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-01-07T00:00:00+00:00

An authorization bypass vulnerability was found in nodes-url-parse. This flaw allows a remote attacker with a basic user account to evade hostname verification by inserting the at symbol "@" at the end of the password field. This issue can allow entry to systems designed to block remote access and may not have additional defenses.


Affected upstream versions: unspecified < 1.5.6
Fixed upstream versions: 1.5.6
Upstream repository: https://github.com/unshiftio/url-parse
Upstream fix commit: 9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40
CVE-2022-0516: kernel: missing check in ioctl allows kernel memory read/write
Component: kernel
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-02-09T06:00:00+00:00

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access.


Affected upstream versions: Linux kernel versions prior to 5.17-rc4
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 09a93c1df3eafa43bcdfd7bf837c574911f12f55
CVE-2022-0536: follow-redirects: Exposure of Sensitive Information via Authorization Header leak
Component: follow-redirects
Severity: Moderate
CWE: CWE-319 (Cleartext Transmission of Sensitive Information)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-02-09T00:00:00+00:00

A flaw was found in the follow-redirects package. This flaw allows the exposure of sensitive information to an unauthorized actor due to the usage of insecure HTTP protocol. This issue happens with an Authorization header leak from the same hostname, https-http, and requires a Man-in-the-Middle (MITM) attack.


Affected upstream versions: unspecified < 1.14.8
Fixed upstream versions: 1.14.8
Upstream repository: https://github.com/follow-redirects/follow-redirects
Upstream fix commit: 62e546a99c07c3ee5e4e0718c84a6ca127c5c445
CVE-2022-0552: origin-aggregated-logging/elasticsearch: Incomplete fix for netty-codec-http CVE-2021-21409
Component: origin-aggregated-logging/elasticsearch
Severity: Moderate
CWE: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-02-28T10:00:00+00:00

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content.

Statement: This CVE only applies to the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container image, shipped in OpenShift Logging 5.1, 5.2. and 5.3.
https://access.redhat.com/errata/RHSA-2021:5128
https://access.redhat.com/errata/RHSA-2021:5127
https://access.redhat.com/errata/RHSA-2021:5129

Affected upstream versions: origin-aggregated-logging versions 3.11
Fixed upstream versions: release-5.5
Upstream repository: https://github.com/openshift/origin-aggregated-logging
Upstream fix commit: d6b72d6c32e7c06b65324294d10406546734004d
CVE-2022-0554: vim: Use of Out-of-range Pointer Offset in vim
Component: vim
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-01-10T00:00:00+00:00

A flaw was found in vim that causes an out-of-range pointer offset vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.


Affected upstream versions: unspecified < 8.2
Fixed upstream versions: 8.2
Upstream repository: https://github.com/vim/vim
Upstream fix commit: e3537aec2f8d6470010547af28dcbd83d41461b8
CVE-2022-0561: libtiff: Denial of Service via crafted TIFF file
Component: libtiff
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2022-02-11T00:00:00+00:00

A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy() function within the TIFFFetchStripThing() in tif_dirread.c. This flaw allows an attacker with a crafted TIFF file to exploit this flaw, causing a crash and leading to a denial of service.


Affected upstream versions: >=3.9.0, <=4.3.0
Fixed upstream versions: v4.4.0
Upstream repository: https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff
Upstream fix commit: eecb0712f4c3a5b449f70c57988260a667ddbdef
CVE-2022-0562: libtiff: Null source pointer lead to Denial of Service via crafted TIFF file
Component: libtiff
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2022-02-11T00:00:00+00:00

A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy() function within the TIFFReadDirectory() in tif_dirread.c. This flaw allows an attacker to exploit this vulnerability via a crafted TIFF file, causing a crash and leading to a denial of service.


Affected upstream versions: >=4.0, <=4.3.0
Fixed upstream versions: v4.4.0
Upstream repository: https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff
Upstream fix commit: 561599c99f987dc32ae110370cfdd7df7975586b
CVE-2022-0613: urijs: Authorization Bypass Through User-Controlled Key
Component: urijs
Severity: Moderate
CWE: CWE-639 (Authorization Bypass Through User-Controlled Key)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2022-02-16T00:00:00+00:00

A flaw was found in urijs due to the fix of CVE-2021-3647 not considering case-sensitive protocol schemes in the URL. This issue allows attackers to bypass the patch.


Affected upstream versions: unspecified < 1.19.8
Fixed upstream versions: 1.19.8
Upstream repository: https://github.com/medialize/uri.js
Upstream fix commit: 6ea641cc8648b025ed5f30b090c2abd4d1a5249f
CVE-2022-0617: kernel: NULL pointer dereference in udf_expand_file_adinicbdue() during writeback
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-01-24T00:00:00+00:00

A NULL pointer dereference was found in the Linux kernel’s UDF file system functionality in the way the user triggers the udf_file_write_iter function for a malicious UDF image. This flaw allows a local user to crash the system.


Affected upstream versions: Linux kernel 5.17-rc2
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 7fc3b7c2981bbd1047916ade327beccb90994eee
CVE-2022-0639: npm-url-parse: Authorization Bypass Through User-Controlled Key
Component: npm-url-parse
Severity: Moderate
CWE: CWE-639 (Authorization Bypass Through User-Controlled Key)
CVSS v3: 6.2 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-02-17T00:00:00+00:00

An authorization bypass flaw was found in url-parse. This flaw allows a local unauthenticated attacker to add an at symbol (@) while submitting a URL. This issue enables the bypass of validation or block-listing restrictions.


Affected upstream versions: unspecified < 1.5.7
Fixed upstream versions: 1.5.7
Upstream repository: https://github.com/unshiftio/url-parse
Upstream fix commit: ef45a1355375a8244063793a19059b4f62fc8788
CVE-2022-0669: dpdk: sending vhost-user-inflight type messages could lead to DoS
Component: dpdk
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 6.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Public date: 2022-04-29T00:00:00+00:00

A flaw was found in dpdk, which allows a malicious primary vhost-user to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the secondary vhost-user. By sending such messages continuously, the primary vhost-user exhausts available fd in the vhost-user standby process, leading to a denial of service.


Affected upstream versions: Affects v19.11-rc1 and later, Fixed in v22.03-rc4.
Fixed upstream versions: v22.03
Upstream repository: https://github.com/DPDK/dpdk
Upstream fix commit: af74f7db384ed149fe42b21dbd7975f8a54ef227
CVE-2022-0686: npm-url-parse: Authorization bypass through user-controlled key
Component: npm-url-parse
Severity: Important
CWE: CWE-639 (Authorization Bypass Through User-Controlled Key)
CVSS v3: 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Public date: 2022-02-20T00:00:00+00:00

An authorization bypass flaw was found in url-parse. While submitting a URL, a local unauthenticated attacker can add a trailing colon (:), but omit the port number. This issue enables an open redirect that allows the exposure of sensitive information or spamming of infrastructure outside the vulnerable server.


Affected upstream versions: unspecified < 1.5.8
Fixed upstream versions: 1.5.8
Upstream repository: https://github.com/unshiftio/url-parse
Upstream fix commit: d5c64791ef496ca5459ae7f2176a31ea53b127e5