CLSA-2022-1658172267
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1658172267.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2022-1658172267
- Upstream
- Published
- 2022-07-18T19:24:27Z
- Modified
- 2026-06-04T10:03:23.322406301Z
- Summary
- Fix CVE(s): CVE-2022-2206, CVE-2022-2257, CVE-2022-2286, CVE-2022-2285, CVE-2022-2284, CVE-2022-2287, CVE-2022-2264
- Details
-
- SECURITY UPDATE: Out-of-bound read in function msgouttransattr
- debian/patches/CVE-2022-2206.patch: Adjust cmdlinerow and msgrow to the value of Rows.
- CVE-2022-2206
- SECURITY UPDATE: Heap-based buffer overflow in function utfc_ptr2len
- debian/patches/CVE-2022-2284.patch: Stop Visual mode when closing a window.
- CVE-2022-2284
- SECURITY UPDATE: Integer overflow in function del_typebuf
- debian/patches/CVE-2022-2285.patch: Put a NUL after the typeahead
- CVE-2022-2285
- SECURITY UPDATE: Out-of-bounds read in function ins_bytes
- debian/patches/CVE-2022-2286.patch: Check the length of the string
- CVE-2022-2286
- SECURITY UPDATE: Out-of-bound read data in function
suggesttriewalk() abusing array byts
- debian/patches/CVE-2022-2287.patch: Disallow adding a word with control characters or a trailing slash.
- CVE-2022-2287
- SECURITY UPDATE: Heap-based buffer overflow in function inc on
put command
- debian/patches/CVE-2022-2264.patch: Adjust the end mark position.
- CVE-2022-2264
- SECURITY UPDATE: Out-of-bound read in function msgouttransspecial
- debian/patches/CVE-2022-2257.patch: check for NUL in str2special
- CVE-2022-2257
- SECURITY UPDATE: Out-of-bound read in function msgouttransattr
- References