Details of VAR-202201-0372

ID

VAR-202201-0372

CVE

CVE-2022-22825

TITLE

Expat Input validation error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202201-640

DESCRIPTION

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. The vulnerability is caused by a boundary error in the lookup in xmlparse.c when processing untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system. Description: Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Bugs fixed (https://bugzilla.redhat.com/): 2062751 - CVE-2022-24730 argocd: path traversal and improper access control allows leaking out-of-bound files 2062755 - CVE-2022-24731 argocd: path traversal allows leaking out-of-bound files 2064682 - CVE-2022-1025 Openshift-Gitops: Improper access control allows admin privilege escalation 5. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience. After installing the updated packages, the httpd daemon will be restarted automatically. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: xmlrpc-c security update Advisory ID: RHSA-2022:7692-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:7692 Issue date: 2022-11-08 CVE Names: CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 ==================================================================== 1. Summary: An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Package List: Red Hat Enterprise Linux BaseOS (v. 8): Source: xmlrpc-c-1.51.0-8.el8.src.rpm aarch64: xmlrpc-c-1.51.0-8.el8.aarch64.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.aarch64.rpm ppc64le: xmlrpc-c-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debugsource-1.51.0-8.el8.ppc64le.rpm s390x: xmlrpc-c-1.51.0-8.el8.s390x.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client-1.51.0-8.el8.s390x.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debugsource-1.51.0-8.el8.s390x.rpm x86_64: xmlrpc-c-1.51.0-8.el8.i686.rpm xmlrpc-c-1.51.0-8.el8.x86_64.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client-1.51.0-8.el8.i686.rpm xmlrpc-c-client-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.i686.rpm xmlrpc-c-debugsource-1.51.0-8.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v. 8): aarch64: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-c++-1.51.0-8.el8.aarch64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client++-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.aarch64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.aarch64.rpm xmlrpc-c-devel-1.51.0-8.el8.aarch64.rpm ppc64le: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-c++-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client++-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-debugsource-1.51.0-8.el8.ppc64le.rpm xmlrpc-c-devel-1.51.0-8.el8.ppc64le.rpm s390x: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-c++-1.51.0-8.el8.s390x.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client++-1.51.0-8.el8.s390x.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.s390x.rpm xmlrpc-c-debugsource-1.51.0-8.el8.s390x.rpm xmlrpc-c-devel-1.51.0-8.el8.s390x.rpm x86_64: xmlrpc-c-apps-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-apps-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-c++-1.51.0-8.el8.i686.rpm xmlrpc-c-c++-1.51.0-8.el8.x86_64.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-c++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client++-1.51.0-8.el8.i686.rpm xmlrpc-c-client++-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client++-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-client-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.i686.rpm xmlrpc-c-debuginfo-1.51.0-8.el8.x86_64.rpm xmlrpc-c-debugsource-1.51.0-8.el8.i686.rpm xmlrpc-c-debugsource-1.51.0-8.el8.x86_64.rpm xmlrpc-c-devel-1.51.0-8.el8.i686.rpm xmlrpc-c-devel-1.51.0-8.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-46143 https://access.redhat.com/security/cve/CVE-2022-22822 https://access.redhat.com/security/cve/CVE-2022-22823 https://access.redhat.com/security/cve/CVE-2022-22824 https://access.redhat.com/security/cve/CVE-2022-22825 https://access.redhat.com/security/cve/CVE-2022-22826 https://access.redhat.com/security/cve/CVE-2022-22827 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY2pSTdzjgjWX9erEAQiDfRAAmj50JYZkSqq4Y57nQvXRqPdFwkfMdgR5 Vot+lbhYR4m2oFhZ0F6Ow4hi60EddVBoyULspeJky1ReuEDn2ou5iw9ScdHFs1nG LF9Wjz+VSNr/619VhHsBRIjlMO7GRa3DYyjJ8LCFdOOcl5IJb6p5wGIQmkEaQo/5 K/kxbNW4XsuVu2p6JkI54pjTyiEoYFxnd2O+cb97aAcnyqxMexV463bkrOCJ0leU JOVf4PXyRaCt5a2AawgJ3yDXhVGWnex+wotylt9F2gttOyLoAKbe73aOYCFszeA8 0z7Bb0GTyKX5OBQltrtJvt+m4bQvQPfTryEDQGeUQv4mnnsUvRkQ7BfoyRLDWuOd IlV+PrQesSsUi3L3VjtZr0MJCNV6A1s7uqC8piac7n1Vrod/pY6ZOxrSUvzoSbgZ XaVZ5Ay/n2TafyxxJ5iZCUm+FOtW28fH8VnTrZeQoLy9xLlAmSH+uS3EEiy+OsxI nv73jUqWLIbgJGTcOgWg24BMmL+ICNaCOjBXkUuA5WGMfLMdtVTN1gKniJ2dPp6Y qKJ4S8aUQ0Ecq0q7HkJ29zatTHystEo60HWOl54pMLQUjIGaITxWaY8aJcvCDQZ7 uOxWKJyMgNeyNZc7UYvZW0UFWnzXBtcwEjyZJDg3u3/IR8RU9ARX0cF73Fm40c5S ZzcPNNMPHw0=wFwS -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . Description: Expat is a C library for parsing XML documents

Trust: 1.53

sources: NVD: CVE-2022-22825 // VULHUB: VHN-411551 // PACKETSTORM: 166431 // PACKETSTORM: 166433 // PACKETSTORM: 169540 // PACKETSTORM: 169541 // PACKETSTORM: 169788 // PACKETSTORM: 166348

AFFECTED PRODUCTS

vendor:	siemens	model:	sinema remote connect server	scope:	lt	version:	3.1	Trust: 1.0
vendor:	tenable	model:	nessus	scope:	gte	version:	10.0.0	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	11.0	Trust: 1.0
vendor:	tenable	model:	nessus	scope:	lt	version:	8.15.3	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	10.0	Trust: 1.0
vendor:	libexpat	model:	libexpat	scope:	lt	version:	2.4.3	Trust: 1.0
vendor:	tenable	model:	nessus	scope:	lt	version:	10.1.1	Trust: 1.0

sources: NVD: CVE-2022-22825

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-22825
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-202201-640
value:	HIGH
Trust: 0.6
VULHUB:	VHN-411551
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2022-22825
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-411551
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2022-22825
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-411551 // CNNVD: CNNVD-202201-640 // NVD: CVE-2022-22825

PROBLEMTYPE DATA

problemtype:

CWE-190

Trust: 1.1

sources: VULHUB: VHN-411551 // NVD: CVE-2022-22825

THREAT TYPE

remote

Trust: 0.7

sources: PACKETSTORM: 169788 // CNNVD: CNNVD-202201-640

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202201-640

EXTERNAL IDS

db:	NVD	id:	CVE-2022-22825	Trust: 2.3
db:	OPENWALL	id:	OSS-SECURITY/2022/01/17/3	Trust: 1.7
db:	SIEMENS	id:	SSA-484086	Trust: 1.7
db:	TENABLE	id:	TNS-2022-05	Trust: 1.7
db:	PACKETSTORM	id:	169788	Trust: 0.8
db:	PACKETSTORM	id:	166348	Trust: 0.8
db:	PACKETSTORM	id:	169541	Trust: 0.8
db:	PACKETSTORM	id:	167008	Trust: 0.7
db:	PACKETSTORM	id:	166496	Trust: 0.7
db:	PACKETSTORM	id:	166976	Trust: 0.7
db:	PACKETSTORM	id:	166437	Trust: 0.7
db:	PACKETSTORM	id:	168578	Trust: 0.7
db:	PACKETSTORM	id:	166516	Trust: 0.7
db:	CS-HELP	id:	SB2022072065	Trust: 0.6
db:	CS-HELP	id:	SB2022072710	Trust: 0.6
db:	CS-HELP	id:	SB2022060617	Trust: 0.6
db:	CS-HELP	id:	SB2022032843	Trust: 0.6
db:	CS-HELP	id:	SB2022070734	Trust: 0.6
db:	CS-HELP	id:	SB2022041954	Trust: 0.6
db:	CS-HELP	id:	SB2022032013	Trust: 0.6
db:	CS-HELP	id:	SB2022011713	Trust: 0.6
db:	CS-HELP	id:	SB2022031627	Trust: 0.6
db:	CS-HELP	id:	SB2022022416	Trust: 0.6
db:	CS-HELP	id:	SB2022070605	Trust: 0.6
db:	CS-HELP	id:	SB2022020902	Trust: 0.6
db:	CS-HELP	id:	SB2022021418	Trust: 0.6
db:	CS-HELP	id:	SB2022033002	Trust: 0.6
db:	CS-HELP	id:	SB2022032445	Trust: 0.6
db:	CS-HELP	id:	SB2022042116	Trust: 0.6
db:	ICS CERT	id:	ICSA-22-167-17	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0626	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.4174	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1677	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1154	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1263	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3299	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0369	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.2165	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.0749	Trust: 0.6
db:	CNNVD	id:	CNNVD-202201-640	Trust: 0.6
db:	PACKETSTORM	id:	166433	Trust: 0.2
db:	PACKETSTORM	id:	166431	Trust: 0.2
db:	PACKETSTORM	id:	169540	Trust: 0.2
db:	CNVD	id:	CNVD-2022-04542	Trust: 0.1
db:	VULHUB	id:	VHN-411551	Trust: 0.1

sources: VULHUB: VHN-411551 // PACKETSTORM: 166431 // PACKETSTORM: 166433 // PACKETSTORM: 169540 // PACKETSTORM: 169541 // PACKETSTORM: 169788 // PACKETSTORM: 166348 // CNNVD: CNNVD-202201-640 // NVD: CVE-2022-22825

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf	Trust: 1.7
url:	https://www.tenable.com/security/tns-2022-05	Trust: 1.7
url:	https://www.debian.org/security/2022/dsa-5073	Trust: 1.7
url:	https://security.gentoo.org/glsa/202209-24	Trust: 1.7
url:	https://github.com/libexpat/libexpat/pull/539	Trust: 1.7
url:	http://www.openwall.com/lists/oss-security/2022/01/17/3	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22825	Trust: 1.2
url:	https://access.redhat.com/articles/11258	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-22824	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-22823	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-22822	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22823	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22826	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-22827	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22824	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22822	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2021-46143	Trust: 0.6
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2022-22827	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2021-46143	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-22825	Trust: 0.6
url:	https://access.redhat.com/security/team/contact/	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-22826	Trust: 0.6
url:	https://bugzilla.redhat.com/):	Trust: 0.6
url:	https://us-cert.cisa.gov/ics/advisories/icsa-22-167-17	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022072710	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022031627	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1154	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022022416	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022041954	Trust: 0.6
url:	https://vigilance.fr/vulnerability/expat-six-vulnerabilities-37271	Trust: 0.6
url:	https://packetstormsecurity.com/files/166976/red-hat-security-advisory-2022-1734-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022020902	Trust: 0.6
url:	https://packetstormsecurity.com/files/166516/red-hat-security-advisory-2022-1083-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.4174	Trust: 0.6
url:	https://packetstormsecurity.com/files/169541/red-hat-security-advisory-2022-7143-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022021418	Trust: 0.6
url:	https://packetstormsecurity.com/files/166348/red-hat-security-advisory-2022-0951-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032843	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022070605	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032445	Trust: 0.6
url:	https://packetstormsecurity.com/files/166496/red-hat-security-advisory-2022-1069-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/168578/gentoo-linux-security-advisory-202209-24.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022072065	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1263	Trust: 0.6
url:	https://packetstormsecurity.com/files/169788/red-hat-security-advisory-2022-7692-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022060617	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022042116	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022032013	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022033002	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022011713	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0749	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.2165	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0626	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3299	Trust: 0.6
url:	https://packetstormsecurity.com/files/167008/red-hat-security-advisory-2022-1747-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/166437/red-hat-security-advisory-2022-1039-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.0369	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1677	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022070734	Trust: 0.6
url:	https://access.redhat.com/security/cve/cve-2022-25315	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-23852	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2021-45960	Trust: 0.5
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-25235	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2021-45960	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23852	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2022-25236	Trust: 0.5
url:	https://access.redhat.com/security/team/key/	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2022-0261	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1025	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-23219	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-23177	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-31566	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23219	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-23218	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0361	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0261	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-23308	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-24407	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24407	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0318	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-24731	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23218	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-3999	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24730	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-23308	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0413	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0392	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0361	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-24730	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-23177	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0359	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0318	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0392	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-1025	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0413	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0359	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-3999	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-31566	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25236	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25235	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-33193	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-44224	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-25313	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-36160	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-39275	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-41524	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-33193	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-41524	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-23990	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-25314	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-44224	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-36160	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-39275	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2020-25710	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1042	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25709	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-25710	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-0811	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0811	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-25709	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1041	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24731	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:7144	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:7143	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:7692	Trust: 0.1
url:	https://access.redhat.com/security/updates/classification/#moderate	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:0951	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25315	Trust: 0.1

CREDITS

Red Hat

Trust: 0.6

sources: PACKETSTORM: 166431 // PACKETSTORM: 166433 // PACKETSTORM: 169540 // PACKETSTORM: 169541 // PACKETSTORM: 169788 // PACKETSTORM: 166348

SOURCES

db:	VULHUB	id:	VHN-411551
db:	PACKETSTORM	id:	166431
db:	PACKETSTORM	id:	166433
db:	PACKETSTORM	id:	169540
db:	PACKETSTORM	id:	169541
db:	PACKETSTORM	id:	169788
db:	PACKETSTORM	id:	166348
db:	CNNVD	id:	CNNVD-202201-640
db:	NVD	id:	CVE-2022-22825

LAST UPDATE DATE

2025-03-28T19:47:20.519000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-411551	date:	2022-10-06T00:00:00
db:	CNNVD	id:	CNNVD-202201-640	date:	2022-11-09T00:00:00
db:	NVD	id:	CVE-2022-22825	date:	2024-11-21T06:47:31.790

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-411551	date:	2022-01-10T00:00:00
db:	PACKETSTORM	id:	166431	date:	2022-03-24T14:34:35
db:	PACKETSTORM	id:	166433	date:	2022-03-24T14:36:50
db:	PACKETSTORM	id:	169540	date:	2022-10-27T13:05:19
db:	PACKETSTORM	id:	169541	date:	2022-10-27T13:05:26
db:	PACKETSTORM	id:	169788	date:	2022-11-08T13:52:57
db:	PACKETSTORM	id:	166348	date:	2022-03-17T15:51:32
db:	CNNVD	id:	CNNVD-202201-640	date:	2022-01-10T00:00:00
db:	NVD	id:	CVE-2022-22825	date:	2022-01-10T14:12:56.847