CLSA-2022-1669241224
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669241224.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2022-1669241224
- Upstream
- Published
- 2022-11-23T22:07:04Z
- Modified
- 2026-06-04T10:04:06.590806344Z
- Summary
- Fix CVE(s): CVE-2022-42012, CVE-2022-42011, CVE-2022-42010, CVE-2020-35512
- Details
-
- SECURITY UPDATE: Use-after-free in access control-related hash tables
- debian/patches/CVE-2020-35512.patch: use reference counting for DBusUserInfo and DBusGroupInfo structures.
- CVE-2020-35512
- SECURITY UPDATE: Crash or incorrect parsing a signature with wrongly
nested '()' and '{}'
- debian/patches/CVE-2022-42010.patch: add extra checking for brackets.
- CVE-2022-42010
- SECURITY UPDATE: Out-of-bounds accesses during processing of arrays
made up of an integer number of items
- debian/patches/CVE-2022-42011.patch: validate length of arrays of fixed-length items.
- CVE-2022-42011
- SECURITY UPDATE: Crash when message type and the pointer into its
contents goes out of sync
- debian/patches/CVE-2022-42012.patch: byte-swap Unix fd indexes if needed.
- CVE-2022-42012
- SECURITY UPDATE: Use-after-free in access control-related hash tables
- References