criu vulnerabilities (AlmaLinux)
145 vulnerabilities.
criuAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumcriuAlmaLinuxSession tickets lack random ticket_age_add in crypto/tls3.1 LowcriuAlmaLinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighcriuAlmaLinuxIncorrect Default Permissions in runc5.9 MediumcriuAlmaLinuxcontainer-tools:4.0 bug fix updateNo scorecriuAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorecriuAlmaLinuxnew module: container-tools:4.0No scorecriuAlmaLinuxPodman publishes a malicious image to public registries8.8 HighcriuAlmaLinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 HighcriuAlmaLinuxPodman's default inheritable capabilities for linux container not empty7.5 HighcriuAlmaLinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumcriuAlmaLinuxgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighcriuAlmaLinuxUncontrolled Resource Consumption in promhttp7.5 HighcriuAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scorecriuAlmaLinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumcriuAlmaLinuxcontainer-tools:3.0 bug fix updateNo scorecriuAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorecriuAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scorecriuAlmaLinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 MediumcriuAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighcriuAlmaLinuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighcriuAlmaLinuxnew module: container-tools:3.0No scorecriuAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scorecriuAlmaLinuxImproper Locking in github.com/containers/storage6.5 MediumcriuAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecriuAlmaLinuxPodman Origin Validation Error5.9 MediumcriuAlmaLinuxIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 HighcriuAlmaLinuxgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 HighcriuAlmaLinuxcontainer-tools:1.0 bug fix and enhancement updateNo scorecriuAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecriuAlmaLinuxGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighcriuAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecriuAlmaLinuxcontainer-tools:1.0 bug fix and enhancement updateNo scorecriuAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scorecriuAlmaLinuxInformation disclosure in podman5.3 MediumcriuAlmaLinuxImproper Authorization in github.com/containers/libpod7.0 HighcriuAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecriuAlmaLinuxcontainer-tools:2.0 bug fix updateNo scorecriuAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scorecriuAlmaLinuxnew module: container-tools:2.0No scorecriuAlmaLinuxA malicious container image can consume an unbounded amount of memory when being pulled to a...3.3 LowcriuAlmaLinuxPath Traversal in Buildah8.8 HighcriuAlmaLinuxPodman has Files or Directories Accessible to External Parties5.9 MediumcriuAlmaLinuxopencontainers runc contains procfs race condition with a shared volume mount7.0 HighcriuAlmaLinuxcriu bug fix and enhancement updateNo score