HIGH CVE-2022-28391 busybox: remote attackers may execute arbitrary code if netstat is used (https://avd.aquasec.com/nvd/cve-2022-28391)

CRITICAL CVE-2022-22822 expat: Integer overflow in addBinding in xmlparse.c (https://avd.aquasec.com/nvd/cve-2022-22822)

CRITICAL CVE-2022-22823 expat: Integer overflow in build_model in xmlparse.c (https://avd.aquasec.com/nvd/cve-2022-22823)

CRITICAL CVE-2022-22824 expat: Integer overflow in defineAttribute in xmlparse.c (https://avd.aquasec.com/nvd/cve-2022-22824)

CRITICAL CVE-2022-23852 expat: Integer overflow in function XML_GetBuffer (https://avd.aquasec.com/nvd/cve-2022-23852)

CRITICAL CVE-2022-25235 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (https://avd.aquasec.com/nvd/cve-2022-25235)

CRITICAL CVE-2022-25236 expat: prefix]" attribute values can lead to arbitrary code execution (https://avd.aquasec.com/nvd/cve-2022-25236)

CRITICAL CVE-2022-25315 expat: Integer overflow in storeRawNames() (https://avd.aquasec.com/nvd/cve-2022-25315)

HIGH CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat (https://avd.aquasec.com/nvd/cve-2021-45960)

HIGH CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c (https://avd.aquasec.com/nvd/cve-2021-46143)

MEDIUM CVE-2022-25313 expat: Stack exhaustion in doctype parsing (https://avd.aquasec.com/nvd/cve-2022-25313)

MEDIUM CVE-2021-37750 krb5-libs: krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field (https://avd.aquasec.com/nvd/cve-2021-37750)

MEDIUM CVE-2022-2097 libcrypto1.1: AES OCB fails to encrypt some bytes (https://avd.aquasec.com/nvd/cve-2022-2097)

MEDIUM CVE-2022-4304 libcrypto1.1: timing attack in RSA Decryption implementation (https://avd.aquasec.com/nvd/cve-2022-4304)

MEDIUM CVE-2023-0465 libcrypto1.1: Invalid certificate policies in leaf certificates are silently ignored (https://avd.aquasec.com/nvd/cve-2023-0465)

MEDIUM CVE-2023-2650 libcrypto1.1: Possible DoS translating ASN.1 object identifiers (https://avd.aquasec.com/nvd/cve-2023-2650)

MEDIUM CVE-2023-3446 libcrypto1.1: Excessive time spent checking DH keys and parameters (https://avd.aquasec.com/nvd/cve-2023-3446)

MEDIUM CVE-2023-3817 libcrypto1.1: Excessive time spent checking DH q parameter value (https://avd.aquasec.com/nvd/cve-2023-3817)

MEDIUM CVE-2022-2097 libssl1.1: AES OCB fails to encrypt some bytes (https://avd.aquasec.com/nvd/cve-2022-2097)