VDB
WID-SEC-W-2022-2347
WID-SEC-W-2022-2347
PUBLISHED
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution. Oracle Linux ist ein Open Source Betriebssystem, welches unter der GNU General Public License (GPL) verfügbar ist.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat JBoss A-MQ Clients 3 | ||
| Red Hat OpenShift Container Platform | ||
| Red Hat JBoss Enterprise Application Platform 7.3.12 | ||
| Red Hat OpenShift Application Runtimes | ||
| Red Hat JBoss Enterprise Application Platform 7.1.9 | ||
| Red Hat Enterprise Linux | ||
| Oracle Linux 8 | ||
| Red Hat JBoss Enterprise Application Platform <7.3.12 | ||
| Red Hat JBoss Enterprise Application Platform <7.1.9 | ||
| Red Hat Enterprise Linux 8 |
Exploit Intelligence
- Sentinel demo: transitive snakeyaml CVE-2022-1471 via Spring Boot + exploitable code pattern (github-poc-repo)
- Sentinel demo: transitive snakeyaml CVE-2022-1471 via Spring Boot + exploitable code pattern (github-poc)
- Code for veracode blog (github-poc-repo)
- SnakeYAML-CVE-2022-1471-POC (github-poc-repo)
- SnakeYAML CVE-2022-1471 exploit payload for demo (github-poc-repo)
- attacker (github-poc-repo)
- attacker (github-poc)
- SnakeYAML CVE-2022-1471 exploit payload for demo (github-poc)
- SnakeYAML-CVE-2022-1471-POC (github-poc)
- Code for veracode blog (github-poc)
…and 37 more exploits
Timeline
- Dec 15, 2022 CVE Published
- Feb 23, 2025 CVE Updated
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
- Apr 3, 2026 Distribution Patch
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2347.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2347 advisory
- https://access.redhat.com/errata/RHSA-2022:9058 url
- http://linux.oracle.com/errata/ELSA-2022-9058-1.html url
- https://access.redhat.com/errata/RHSA-2022:9032 url
- https://access.redhat.com/errata/RHSA-2023:0758 url
- https://access.redhat.com/errata/RHSA-2023:0698 url
- https://access.redhat.com/errata/RHSA-2023:0697 url
- https://access.redhat.com/errata/RHSA-2023:1045 url
- https://access.redhat.com/errata/RHSA-2023:1044 url
- https://access.redhat.com/errata/RHSA-2023:1047 url
- https://access.redhat.com/errata/RHSA-2023:1049 url
- https://access.redhat.com/errata/RHSA-2023:1006 url
- https://access.redhat.com/errata/RHSA-2023:1512 url
- https://access.redhat.com/errata/RHSA-2023:1514 url
- https://access.redhat.com/errata/RHSA-2023:1513 url
- https://access.redhat.com/errata/RHSA-2023:4612 url
- https://access.redhat.com/errata/RHSA-2023:5165 url
- https://access.redhat.com/errata/RHSA-2023:7697 url
- https://access.redhat.com/errata/RHSA-2024:0325 url
…and 4 more