Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2022-2526
Description:A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
Test IDs: 1.3.6.1.4.1.25623.1.1.2.2022.2450   1.3.6.1.4.1.25623.1.1.2.2023.2403   1.3.6.1.4.1.25623.1.1.12.2022.5583.2   1.3.6.1.4.1.25623.1.1.2.2023.1698   1.3.6.1.4.1.25623.1.0.884240   1.3.6.1.4.1.25623.1.0.845498  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-2526
https://github.com/systemd/systemd/commit/d973d94dec349fb676fdd844f6fe2ada3538f27c
https://github.com/systemd/systemd/commit/d973d94dec349fb676fdd844f6fe2ada3538f27c




© 1998-2025 E-Soft Inc. All rights reserved.