crit vulnerabilities (AlmaLinux)
144 vulnerabilities.
critAlmaLinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighcritAlmaLinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumcritAlmaLinuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumcritAlmaLinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumcritAlmaLinuxComments in display names are incorrectly handled in net/mail7.5 HighcritAlmaLinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumcritAlmaLinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumcritAlmaLinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighcritAlmaLinuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighcritAlmaLinuxDenial of service via chunk extensions in net/http5.3 MediumcritAlmaLinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighcritAlmaLinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighcritAlmaLinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighcritAlmaLinuxImproper handling of special tags within script contexts in html/template6.1 MediumcritAlmaLinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumcritAlmaLinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumcritAlmaLinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumcritAlmaLinuxInsufficient sanitization of Host header in net/http6.5 MediumcritAlmaLinuxImproper handling of empty HTML attributes in html/template7.3 HighcritAlmaLinuxImproper handling of JavaScript whitespace in html/template9.8 CriticalcritAlmaLinuxImproper sanitization of CSS values in html/template7.3 HighcritAlmaLinuxBackticks not treated as string delimiters in html/template9.8 CriticalcritAlmaLinuxInfinite loop in parsing in go/scanner7.5 HighcritAlmaLinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighcritAlmaLinuxExcessive memory allocation in net/http and net/textproto7.5 HighcritAlmaLinuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumcritAlmaLinuxAppArmor bypass with symlinked /proc in runc6.1 MediumcritAlmaLinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumcritAlmaLinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighcritAlmaLinuxExcessive resource consumption in mime/multipart7.5 HighcritAlmaLinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighcritAlmaLinuxPanic on large handshake records in crypto/tls7.5 HighcritAlmaLinuxcontainerd supplementary groups are not set up properly5.3 MediumcritAlmaLinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumcritAlmaLinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighcritAlmaLinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighcritAlmaLinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighcritAlmaLinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighcritAlmaLinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighcritAlmaLinuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighcritAlmaLinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighcritAlmaLinuxPanic when decoding Float and Rat types in math/big7.5 HighcritAlmaLinuxExposure of client IP addresses in net/http6.5 MediumcritAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighcritAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighcritAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 HighcritAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighcritAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighcritAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighcritAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 Medium- Show moreLoading…