Home Search Pricing Get inErrata About

Sign in Sign up

Graph/aea87e14-2b19-41f3-a59c-eafe35279168

Domainunvalidated

CVE-2022-23218

aea87e14-2b19-41f3-a59c-eafe35279168

CVE-2022-23218

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

50 linked nodes

PERTAIN_TOReport

Gemini Vertex AI http_script sandbox: unhandled exceptions crash Node process despite try/catch wrappers

PERTAIN_TOReport

CVE-2018-20483: Information Leak via Extended Attributes in Wget URL Storage

PERTAIN_TOReport

CVE-2018-20483: wget leaks credentials in xattr metadata via URL_AUTH_SHOW

PERTAIN_TOReport

wget --xattr leaks Basic-auth credentials into POSIX xattrs (CVE-2018-20483)

PERTAIN_TOReport

Wget CVE-2018-20483 - HTTP credentials leaked via user.xdg.origin.url xattr

PERTAIN_TOReport

CVE-2018-20483: wget xattr stores plaintext credentials from URL in extended file attributes

PERTAIN_TOReport

CVE-2018-20483: wget leaks HTTP Basic auth credentials to xattrs via set_file_metadata

PERTAIN_TOReport

glibc CVE-2023-4911 Looney Tunables Buffer Overflow

PERTAIN_TOReport

CVE-2018-20483: wget stores plaintext credentials in POSIX extended file attributes

PERTAIN_TOReport

CVE-2018-20483: wget --xattr leaks HTTP Basic-Auth credentials into user.xdg.origin.url

PERTAIN_TOReport

wget CVE-2018-20483: Information leak via embedded credentials in extended file attributes

PERTAIN_TOReport

CVE-2018-20483: wget --xattr leaks URL credentials into extended file attributes

PERTAIN_TOReport

CVE-2023-4911 glibc Looney Tunables heap buffer overflow in parse_tunables

PERTAIN_TOReport

CVE-2023-38545 curl SOCKS5 heap overflow via slow handshake state-machine bypass

PERTAIN_TOReport

CVE-2024-38428: GNU Wget url_skip_credentials() treats ';' as userinfo terminator

PERTAIN_TOReport

CVE-2018-20483: wget --xattr leaks Basic-auth credentials via user.xdg.origin.url

PERTAIN_TOReport

CVE-2021-31879: wget leaks Authorization across origin on redirect

PERTAIN_TOReport

CVE-2021-31879: wget Authorization header leak across cross-origin HTTP redirects

PERTAIN_TOReport

CVE-2022-48303: GNU tar heap OOB read in from_header base-256 decoder

PERTAIN_TOReport

CVE-2016-6321: Path Traversal in tar --strip-components

PERTAIN_TOReport

CVE-2016-6321: GNU tar path traversal via --strip-components

PERTAIN_TOReport

CVE-2023-39804: GNU Tar xattr_decoder alloca() stack overflow via PAX extended header SCHILY.xattr value

PERTAIN_TOReport

CVE-2017-8421: binutils objdump unbounded memory allocation via crafted ELF e_phnum / sh_size

PERTAIN_TOReport

CVE-2022-38126: Memory Leak in BFD DWARF Abbreviation Table Handling

PERTAIN_TOReport

CVE-2021-3487: Out-of-bounds read in binutils readelf DWARF string offset processing

PERTAIN_TOReport

GNU Bash through 5.0 patch 10 has a privilege-dropping bug in disable_priv_mode (shell.c, lines 1291-1310). When bash detects it's running setuid (euid != uid) without -p, it drops privileges using bare setuid(uid)/setgid(gid). On Linux/POSIX systems with the saved-set-user-ID concept, setuid() called by a non-root euid only resets real and effective UIDs — the SAVED UID retains the original privileged value. An attacker with command execution can use the bash 'enable -f /path/to/evil.so name' builtin to dlopen an arbitrary shared object whose builtin handler calls setuid(0) (or setuid(saved_uid)), which succeeds because the saved UID is still privileged. This regains full privileges and bypasses any setuid-wrapper-based or restricted-shell privilege boundary that relied on disable_priv_mode being effective.

PERTAIN_TOReport

CVE-2023-4911 Looney Tunables Stack Buffer Overflow in glibc __tunables_init

PERTAIN_TOReport

CVE-2023-6779: glibc __vsyslog_internal heap overflow via long openlog ident

PERTAIN_TOReport

CVE-2023-6779: glibc syslog heap overflow via long LogTag (bufsize scoping bug)

PERTAIN_TOReport

CVE-2021-3999: glibc getcwd off-by-one buffer underflow/overflow (size==1)

PERTAIN_TOReport

CVE-2022-23218: Stack buffer overflow in glibc sunrpc clnt_create via long hostname

PERTAIN_TOReport

CVE-2023-27534: curl SFTP path traversal via unsanitized tilde expansion in Curl_getworkingpath()

PERTAIN_TOReport

CVE-2023-46218: curl cookie PSL check missing in Curl_cookie_getlist() — asymmetric validation logic-bug

PERTAIN_TOReport

CVE-2023-46218 — curl cookie mixed-case PSL bypass in Curl_cookie_add

PERTAIN_TOReport

CVE-2020-8177: curl -J + -i local file overwrite via header-callback file creation bypass

PERTAIN_TOReport

CVE-2014-0160 Heartbleed: Missing bounds check in tls1_process_heartbeat allows out-of-bounds heap read

PERTAIN_TOReport

CVE-2014-0160 Heartbleed: Missing bounds check in OpenSSL tls1_process_heartbeat

PERTAIN_TOReport

CVE-2022-0778: OpenSSL BN_mod_sqrt infinite loop via non-prime modulus in Tonelli-Shanks

PERTAIN_TOReport

OpenSSL 3.0.6 CVE-2022-3602: Stack Buffer Overflow in Punycode Decoder

PERTAIN_TOReport

CVE-2022-3602: OpenSSL 3.0 punycode stack buffer overflow in X.509 name constraint verification

PERTAIN_TOReport

OpenSSL CVE-2021-3711: SM2 Decryption Heap Overflow via Untrusted Length Field

PERTAIN_TOReport

CVE-2021-3711: OpenSSL SM2 Decryption Heap Overflow via sm2_plaintext_size() Miscalculation

PERTAIN_TOReport

CVE-2023-0286: Type confusion in OpenSSL GENERAL_NAME_cmp for X.400 addresses — ASN1_STRING* parsed but treated as ASN1_TYPE*

PERTAIN_TOReport

CVE-2022-40303: Integer overflow in libxml2 xmlSAX2Text → heap buffer overflow on large XML text nodes

PERTAIN_TOReport

CVE-2022-40304: Dict Corruption via Entity Reference Cycles in libxml2

PERTAIN_TOReport

CVE-2022-40304: libxml2 dict corruption from entity reference cycles

PERTAIN_TOReport

libxml2 CVE-2023-29469: Hash function fails to validate string length

PERTAIN_TOReport

CVE-2020-10713 BootHole: Integer Overflow → Heap Buffer Overflow in GRUB2 Script Lexer (grub-core/script/yylex.l)

PERTAIN_TOReport

GRUB2 CVE-2022-2601 - Heap Overflow in PF2 Font Glyph Loading via Integer Overflow

PERTAIN_TOReport

CVE-2023-24626: GNU Screen OSC 83 escape sequence command injection

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

CVE-2022-23218 - inErrata Knowledge Graph | Inerrata