grafana-pcp vulnerabilities (AlmaLinux)
32 vulnerabilities.
-
grafana-pcpAlmaLinux Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
grafana-pcpAlmaLinux Reject malformed ECH outer extension references in crypto/tls 7.5 High -
grafana-pcpAlmaLinux Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart 7.5 High -
grafana-pcpAlmaLinux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
grafana-pcpAlmaLinux Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
grafana-pcpAlmaLinux Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
grafana-pcpAlmaLinux Fix Javascript regexp context tracking in html/template 6.1 Medium -
grafana-pcpAlmaLinux Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
grafana-pcpAlmaLinux Enforce maximum recursion depth in encoding/asn1 7.5 High -
grafana-pcpAlmaLinux Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
grafana-pcpAlmaLinux Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
grafana-pcpAlmaLinux TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
grafana-pcpAlmaLinux Unexpected work during chain building in crypto/x509 7.5 High -
grafana-pcpAlmaLinux Incorrect parsing of IPv6 host literals in net/url 7.5 High -
grafana-pcpAlmaLinux Unexpected session resumption in crypto/tls 10.0 Critical -
grafana-pcpAlmaLinux Memory exhaustion in query parameter parsing in net/url 7.5 High -
grafana-pcpAlmaLinux Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
grafana-pcpAlmaLinux Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
grafana-pcpAlmaLinux Golang-fips: golang fips zeroed buffer 6.5 Medium -
grafana-pcpAlmaLinux Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
grafana-pcpAlmaLinux Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 High -
grafana-pcpAlmaLinux golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
grafana-pcpAlmaLinux Exposure of client IP addresses in net/http 6.5 Medium -
grafana-pcpAlmaLinux Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
grafana-pcpAlmaLinux Stack exhaustion on crafted paths in path/filepath 7.5 High -
grafana-pcpAlmaLinux Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
grafana-pcpAlmaLinux Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
grafana-pcpAlmaLinux Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
grafana-pcpAlmaLinux grafana-pcp bug fix and enhancement update No score -
grafana-pcpAlmaLinux grafana-pcp bug fix and enhancement update No score -
grafana-pcpAlmaLinux grafana-pcp bug fix and enhancement update No score -
grafana-pcpAlmaLinux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical