CVE-2022-2414

idm-pki-acme: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Secur...

CVE-2022-2414 is fixed in 73 products on 1 platform, first by dogtag-pki 11.0.0-1ubuntu0.1~esm1, released July 29, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.8539
99th percentile

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Security Fix(es): * pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
apache-commons-collections · ol 8 0:3.2.2-10.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
apache-commons-collections · rocky 8 0:3.2.2-10.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
apache-commons-lang · ol 8 0:2.6-21.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
apache-commons-lang · rocky 8 0:2.6-21.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
apache-commons-net · ol 8 0:3.6-3.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
apache-commons-net · rocky 8 0:3.6-3.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
bea-stax · rocky 8 0:1.2.0-16.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
bea-stax-api · ol 8 0:1.2.0-16.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
dogtag-pki · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 dogtag-pki 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
dogtag-pki-console-theme · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 dogtag-pki-console-theme 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
dogtag-pki-server-theme · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 dogtag-pki-server-theme 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
glassfish-fastinfoset · ol 8 0:1.2.13-9.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
glassfish-fastinfoset · rocky 8 0:1.2.13-9.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
glassfish-jaxb · rocky 8 0:2.2.11-11.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
glassfish-jaxb-api · ol 8 0:2.2.12-8.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
glassfish-jaxb-api · rocky 8 0:2.2.12-8.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
glassfish-jaxb-core · ol 8 0:2.2.11-11.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
glassfish-jaxb-runtime · ol 8 0:2.2.11-11.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
glassfish-jaxb-txw2 · ol 8 0:2.2.11-11.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
idm-pki-acme · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-acme · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-acme · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-base · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-base · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-base · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-base-java · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-base-java · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-base-java · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-ca · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-ca · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-ca · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-kra · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-kra · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-kra · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-server · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-server · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-server · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-symkey · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-symkey · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-symkey · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
idm-pki-tools · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
idm-pki-tools · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
idm-pki-tools · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
jackson-annotations · ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jackson-annotations · rocky 8 0:2.10.0-1.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
jackson-core · ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jackson-core · rocky 8 0:2.10.0-1.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
jackson-databind · ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jackson-databind · rocky 8 0:2.10.0-1.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
jackson-jaxrs-json-provider · ol 8 0:2.9.9-1.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jackson-jaxrs-providers · ol 8 0:2.9.9-1.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jackson-jaxrs-providers · rocky 8 0:2.9.9-1.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
jackson-module-jaxb-annotations · ol 8 0:2.7.6-4.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jackson-module-jaxb-annotations · rocky 8 0:2.7.6-4.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
jakarta-commons-httpclient · ol 8 1:3.1-28.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jakarta-commons-httpclient · rocky 8 1:3.1-28.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
javassist · ol 8 0:3.18.1-8.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
javassist · rocky 8 0:3.18.1-8.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
javassist-javadoc · ol 8 0:3.18.1-8.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
jss · ol 8 0:4.9.4-1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
jss · rocky 8 0:4.9.4-1.module+el8.7.0+1069+6f3de942 RLSA-2022:7470 Nov 8, 2022
jss-javadoc · ol 8 0:4.9.4-1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
ldapjdk · ol 8 0:4.23.0-1.module+el8.5.0+20349+9cc212a8 ELSA-2022-7470 Nov 15, 2022
ldapjdk · rocky 8 0:4.23.0-1.module+el8.7.0+1069+6f3de942 RLSA-2022:7470 Nov 8, 2022
ldapjdk-javadoc · RHEL 8 0:4.23.0-1.module+el8.5.0+11983+6ba118b4 RHSA-2022:7470 Nov 8, 2022
ldapjdk-javadoc · almalinux 8 4.23.0-1.module_el8.6.0+2764+9fc58d50 ALSA-2022:7470 Nov 8, 2022
ldapjdk-javadoc · ol 8 0:4.23.0-1.module+el8.5.0+20349+9cc212a8 ELSA-2022-7470 Nov 15, 2022
libsymkey-java · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 libsymkey-java 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
libsymkey-jni · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 libsymkey-jni 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-acme · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-acme · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-acme · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-base · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-base · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-base 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-base · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-base · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-base-java · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-base-java · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-base-java 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-base-java · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-base-java · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-ca · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-ca · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-ca 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-ca · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-ca · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-console · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-console 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-core · rocky 8 0:10.12.0-4.module+el8.7.0+1069+6f3de942 RLSA-2022:7470 Nov 8, 2022
pki-core · rocky 9 0:11.0.6-2.el9_0 RLSA-2022:7326 Nov 2, 2022
pki-javadoc · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-javadoc 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-kra · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-kra · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-kra 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-kra · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-kra · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-ocsp · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-ocsp 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-server · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-server · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-server 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-server · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-server · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-servlet-4.0-api · ol 8 1:9.0.50-1.module+el8.7.0+20772+f86c9a56 ELSA-2022-7470 Nov 15, 2022
pki-servlet-engine · ol 8 1:9.0.50-1.module+el8.7.0+20772+f86c9a56 ELSA-2022-7470 Nov 15, 2022
pki-symkey · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-symkey · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-symkey · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-tks · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-tks 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-tools · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
pki-tools · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-tools 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-tools · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
pki-tools · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
pki-tps · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-tps 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
pki-tps-client · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 pki-tps-client 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
python-nss · rocky 8 0:1.0.1-10.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
python-nss-doc · ol 8 0:1.0.1-10.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
python3-idm-pki · RHEL 8 0:10.12.0-4.module+el8.7.0+16126+c5918a27 RHSA-2022:7470 Nov 8, 2022
python3-idm-pki · almalinux 8 10.12.0-4.module_el8.7.0+3316+50b99934 ALSA-2022:7470 Nov 8, 2022
python3-idm-pki · ol 8 0:10.12.0-4.0.1.module+el8.7.0+20845+c5918a27 ELSA-2022-7470 Nov 15, 2022
python3-nss · ol 8 0:1.0.1-10.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
python3-pki · RHEL 9 0:11.0.6-2.el9_0 RHSA-2022:7326 Nov 2, 2022
python3-pki · almalinux 9 11.0.6-2.el9_0 ALSA-2022:7326 Nov 2, 2022
python3-pki · ol 9 0:11.0.6-2.0.1.el9_0 ELSA-2022-7326 Nov 3, 2022
python3-pki-base · Ubuntu 22.04.1 LTS (jammy) 11.0.0-1ubuntu0.1~esm1 python3-pki-base 11.0.0-1ubuntu0.1~esm1 Jul 29, 2022
relaxngDatatype · ol 8 0:2011.1-7.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
relaxngDatatype · rocky 8 0:2011.1-7.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
resteasy · ol 8 0:3.0.26-6.module+el8.4.0+20041+bb8828ef ELSA-2022-7470 Nov 15, 2022
resteasy · rocky 8 0:3.0.26-6.module+el8.5.0+697+f586bb30 RLSA-2022:7470 Nov 8, 2022
slf4j · ol 8 0:1.7.25-4.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
slf4j · rocky 8 0:1.7.25-4.module+el8.5.0+697+f586bb30 RLSA-2022:7470 Nov 8, 2022
slf4j-jdk14 · ol 8 0:1.7.25-4.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
stax-ex · ol 8 0:1.7.7-8.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
stax-ex · rocky 8 0:1.7.7-8.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
tomcatjss · ol 8 0:7.7.1-1.module+el8.6.0+20558+60d461b7 ELSA-2022-7470 Nov 15, 2022
tomcatjss · rocky 8 0:7.7.1-1.module+el8.6.0+788+76246f77 RLSA-2022:7470 Nov 8, 2022
velocity · ol 8 0:1.7-24.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
velocity · rocky 8 0:1.7-24.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
xalan-j2 · ol 8 0:2.7.1-38.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
xalan-j2 · rocky 8 0:2.7.1-38.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
xerces-j2 · ol 8 0:2.11.0-34.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
xerces-j2 · rocky 8 0:2.11.0-34.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
xml-commons-apis · ol 8 0:1.4.01-25.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
xml-commons-apis · rocky 8 0:1.4.01-25.module+el8.5.0+697+f586bb30 RLSA-2022:7470 Nov 8, 2022
xml-commons-resolver · ol 8 0:1.2-26.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
xml-commons-resolver · rocky 8 0:1.2-26.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
xmlstreambuffer · ol 8 0:1.5.4-8.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
xmlstreambuffer · rocky 8 0:1.5.4-8.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022
xsom · ol 8 0:0-19.20110809svn.module+el8.3.0+7697+44932688 ELSA-2022-7470 Nov 15, 2022
xsom · rocky 8 0:0-19.20110809svn.module+el8.3.0+53+ea062990 RLSA-2022:7470 Nov 8, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.