CVE-2022-25636

概要

参考情報

• packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html · Third Party Advisory
• openwall.com/lists/oss-security/2022/02/22/1 · Mailing List
• git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit · Patch
• Bonfee/CVE-2022-25636 · Exploit
• nickgregory.me/linux/security/2022/03/12/cve-2022-25636 · Exploit
• security.netapp.com/advisory/ntap-20220325-0002 · Third Party Advisory
• debian.org/security/2022/dsa-5095 · Third Party Advisory
• openwall.com/lists/oss-security/2022/02/21/2 · Exploit
• oracle.com/security-alerts/cpujul2022.html · Patch

communications cloud native core binding support function のその他の脆弱性

• CVE-2023-21971中 5.3Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and…
• CVE-2023-21824中 4.4Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer,…
• CVE-2022-22965緊急 9.8悪用確認済み（CISA KEV）A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2022-0322中 5.5A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a …
• CVE-2021-4203中 6.8A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and co…