Branch sisyphus update bulletin.

Package kernel-image-centos updated to version 5.14.0.286-alt1.el9 for branch sisyphus in task 316619.

Published: 2022-12-14

BDU:2022-07339

Уязвимость драйвера файловой системы NFS ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.4) Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

References:

CVE-2022-4379

Published: 2023-01-11
Modified: 2024-11-21

CVE-2022-4379

A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to conduct a remote denial

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

Package dotnet-bootstrap-5.0 updated to version 5.0.17-alt1 for branch sisyphus in task 316631.

Published: 2022-05-10

BDU:2022-05512

Уязвимость средства разработки программного обеспечения Microsoft Visual Studio и программной платформы Microsoft.NET Framework, связанная c некорректной зачисткой или освобождением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2022-23267

Published: 2022-05-10

BDU:2022-05513

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2022-29117

Published: 2022-05-10

BDU:2022-05514

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2022-29145

Published: 2022-05-11
Modified: 2025-01-02

CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability

Severity: MEDIUM (5.0)

References:

Published: 2022-05-11
Modified: 2025-01-02

CVE-2022-29117

.NET and Visual Studio Denial of Service Vulnerability

Severity: MEDIUM (5.0)

References:

Published: 2022-05-11
Modified: 2025-01-02

CVE-2022-29145

.NET and Visual Studio Denial of Service Vulnerability

Severity: MEDIUM (5.0)

References:

Package dotnet-runtime-5.0 updated to version 5.0.17-alt1 for branch sisyphus in task 316631.

Published: 2022-05-10

BDU:2022-05512

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2022-23267

Published: 2022-05-10

BDU:2022-05513

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2022-29117

Published: 2022-05-10

BDU:2022-05514

Severity: HIGH (7.5) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References:

CVE-2022-29145

Published: 2022-05-11
Modified: 2025-01-02

CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability

Severity: MEDIUM (5.0)

References:

Published: 2022-05-11
Modified: 2025-01-02

CVE-2022-29117

.NET and Visual Studio Denial of Service Vulnerability

Severity: MEDIUM (5.0)

References:

Published: 2022-05-11
Modified: 2025-01-02

CVE-2022-29145

.NET and Visual Studio Denial of Service Vulnerability

Severity: MEDIUM (5.0)

References:

Package dotnet-bootstrap-3.1 updated to version 3.1.32-alt1 for branch sisyphus in task 316626.

Published: 2022-12-13

BDU:2022-07294

Уязвимость программных платформ Microsoft .NET Core, .NET Framework и .NET, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2022-41089

Published: 2022-08-09
Modified: 2024-11-21

CVE-2022-34716

.NET Spoofing Vulnerability

References:

Published: 2022-09-13
Modified: 2025-01-02

CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

References:

Published: 2022-10-11
Modified: 2025-03-01

CVE-2022-41032

NuGet Client Elevation of Privilege Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-12-13
Modified: 2025-01-03

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Package dotnet-coreclr-3.1 updated to version 3.1.32-alt1 for branch sisyphus in task 316626.

Published: 2022-12-13

BDU:2022-07294

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

CVE-2022-41089

Published: 2022-08-09
Modified: 2024-11-21

CVE-2022-34716

.NET Spoofing Vulnerability

References:

Published: 2022-10-11
Modified: 2025-03-01

CVE-2022-41032

NuGet Client Elevation of Privilege Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2022-12-13
Modified: 2025-01-03

CVE-2022-41089

.NET Framework Remote Code Execution Vulnerability

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References:

Package dotnet-aspnetcore-3.1 updated to version 3.1.32-alt1 for branch sisyphus in task 316626.

Published: 2022-09-13
Modified: 2025-01-02

CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

References:

Package sleuthkit updated to version 4.12.0-alt1 for branch sisyphus in task 316657.

Published: 2023-01-24
Modified: 2024-11-21

CVE-2022-45639

OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

ALT-BU-2023-2822-1

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities

Closed vulnerabilities