containernetworking-plugins vulnerabilities (AlmaLinux)
145 vulnerabilities.
containernetworking-pluginsAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 Mediumcontainernetworking-pluginsAlmaLinuxSession tickets lack random ticket_age_add in crypto/tls3.1 Lowcontainernetworking-pluginsAlmaLinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 Highcontainernetworking-pluginsAlmaLinuxIncorrect Default Permissions in runc5.9 Mediumcontainernetworking-pluginsAlmaLinuxcontainer-tools:4.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxnew module: container-tools:4.0No scorecontainernetworking-pluginsAlmaLinuxPodman publishes a malicious image to public registries8.8 Highcontainernetworking-pluginsAlmaLinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 Highcontainernetworking-pluginsAlmaLinuxPodman's default inheritable capabilities for linux container not empty7.5 Highcontainernetworking-pluginsAlmaLinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 Mediumcontainernetworking-pluginsAlmaLinuxgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highcontainernetworking-pluginsAlmaLinuxUncontrolled Resource Consumption in promhttp7.5 Highcontainernetworking-pluginsAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scorecontainernetworking-pluginsAlmaLinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 Mediumcontainernetworking-pluginsAlmaLinuxcontainer-tools:3.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scorecontainernetworking-pluginsAlmaLinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 Mediumcontainernetworking-pluginsAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 Highcontainernetworking-pluginsAlmaLinuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 Highcontainernetworking-pluginsAlmaLinuxnew module: container-tools:3.0No scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scorecontainernetworking-pluginsAlmaLinuxImproper Locking in github.com/containers/storage6.5 Mediumcontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxPodman Origin Validation Error5.9 Mediumcontainernetworking-pluginsAlmaLinuxIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 Highcontainernetworking-pluginsAlmaLinuxgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 Highcontainernetworking-pluginsAlmaLinuxcontainer-tools:1.0 bug fix and enhancement updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 Highcontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:1.0 bug fix and enhancement updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scorecontainernetworking-pluginsAlmaLinuxImproper Authorization in github.com/containers/libpod7.0 Highcontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecontainernetworking-pluginsAlmaLinuxnew module: container-tools:2.0No scorecontainernetworking-pluginsAlmaLinuxPath Traversal in Buildah8.8 Highcontainernetworking-pluginsAlmaLinuxopencontainers runc contains procfs race condition with a shared volume mount7.0 Highcontainernetworking-pluginsAlmaLinuxIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 Mediumcontainernetworking-pluginsAlmaLinuxtcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 Mediumcontainernetworking-pluginsAlmaLinuxlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 Highcontainernetworking-pluginsAlmaLinuxSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highcontainernetworking-pluginsAlmaLinuxSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 High