Fedoraproject: Security Vulnerabilities
A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.
CVSS Score
5.5
EPSS Score
0.001
Published
2022-08-29
A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score
7.0
EPSS Score
0.0
Published
2022-08-29
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.
CVSS Score
8.8
EPSS Score
0.003
Published
2022-08-29
A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_common_interceptors.inc.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 contains a segmentation fault.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-08-29