Vuldb Updates

A vulnerability described as problematic has been identified in systemd. This affects an unknown function of the file /tmp. The manipulation results in uncontrolled recursion. This vulnerability is reported as CVE-2021-3997. The attack can be launched remotely. No exploit exists. Applying a patch is advised to resolve this issue.

A vulnerability, which was classified as critical, has been found in libarchive. Affected by this vulnerability is an unknown functionality of the component Access Control List Handler. Performing a manipulation results in link following. This vulnerability is known as CVE-2021-31566. Remote exploitation of the attack is possible. No exploit is available. To fix this issue, it is recommended to deploy a patch.

A vulnerability described as critical has been identified in Linux Kernel. This vulnerability affects the function adjust_scalar_min_max_vals of the file kernel/bpf/verifier.c of the component ebpf Verifier. Executing a manipulation of the argument dst_reg can lead to exposure of sensitive information through data queries. This vulnerability is registered as CVE-2021-4159. It is possible to launch the attack remotely. No exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability classified as critical was found in Linux Kernel. Impacted is an unknown function of the component eBPF. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2021-4204. The attack can be launched remotely. No exploit exists. Updating the configuration settings is suggested.

A vulnerability has been found in unzip and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Unicode String Handler. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2021-4217. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in vim. Affected is an unknown function. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2022-2980. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in vim. Affected by this vulnerability is an unknown functionality. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2022-2874. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in vim. Affected by this issue is some unknown functionality. Such manipulation leads to use after free. This vulnerability is traded as CVE-2022-2889. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability described as problematic has been identified in vim. Affected by this issue is some unknown functionality. The manipulation results in null pointer dereference. This vulnerability was named CVE-2022-2923. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in PostgreSQL. Affected by this issue is some unknown functionality of the component Non-Temporary Object Handler. The manipulation leads to dynamically-managed code resources. This vulnerability is referenced as CVE-2022-2625. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in HtmlUnit NekoHtml up to 2.60.x. It has been declared as critical. This affects an unknown part of the component PI Data Handler. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is tracked as CVE-2022-29546. The attack is only possible within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Microsoft Windows. This affects an unknown function of the component Kerberos. Executing a manipulation can lead to privilege escalation. This vulnerability is tracked as CVE-2022-26931. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability classified as problematic was found in libcURL. Affected by this issue is some unknown functionality. The manipulation results in insertion of sensitive information into sent data. This vulnerability is known as CVE-2022-27779. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Microsoft HEVC Video Extensions. It has been classified as critical. This impacts an unknown function. The manipulation leads to Remote Code Execution. This vulnerability is referenced as CVE-2022-22018. Remote exploitation of the attack is possible. No exploit is available. It is recommended to apply a patch to fix this issue.

A vulnerability categorized as critical has been discovered in Microsoft HEVC Video Extensions. Affected by this issue is some unknown functionality. Such manipulation leads to Remote Code Execution. This vulnerability is listed as CVE-2022-29119. The attack may be performed from remote. There is no available exploit. A patch should be applied to remediate this issue.

A vulnerability identified as critical has been detected in Microsoft SQL Server 2014 SP3 CU4/2016 SP3/2017 RTM/2019 RTM. This affects an unknown part. Performing a manipulation results in privilege escalation. This vulnerability is cataloged as CVE-2022-29143. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability marked as very critical has been reported in Microsoft Windows. Affected is an unknown function of the component Kerberos AppContainer. Performing a manipulation results in privilege escalation. This vulnerability is cataloged as CVE-2022-30164. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to install a patch to address this issue.

A vulnerability was found in Microsoft Office up to LTSC 2021 and classified as critical. Affected is an unknown function. Executing a manipulation can lead to Remote Code Execution. This vulnerability is registered as CVE-2022-34717. It is possible to launch the attack remotely. No exploit is available. A patch should be applied to remediate this issue.

A vulnerability was found in vim. It has been classified as critical. The affected element is an unknown function. Performing a manipulation results in heap-based buffer overflow. This vulnerability is identified as CVE-2022-2819. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in vim. This impacts an unknown function. Such manipulation leads to use after free. This vulnerability is listed as CVE-2022-2817. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.