libslirp vulnerabilities (AlmaLinux)
132 vulnerabilities.
libslirpAlmaLinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighlibslirpAlmaLinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumlibslirpAlmaLinuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumlibslirpAlmaLinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumlibslirpAlmaLinuxComments in display names are incorrectly handled in net/mail7.5 HighlibslirpAlmaLinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumlibslirpAlmaLinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumlibslirpAlmaLinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighlibslirpAlmaLinuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighlibslirpAlmaLinuxDenial of service via chunk extensions in net/http5.3 MediumlibslirpAlmaLinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighlibslirpAlmaLinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighlibslirpAlmaLinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighlibslirpAlmaLinuxImproper handling of special tags within script contexts in html/template6.1 MediumlibslirpAlmaLinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumlibslirpAlmaLinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumlibslirpAlmaLinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumlibslirpAlmaLinuxInsufficient sanitization of Host header in net/http6.5 MediumlibslirpAlmaLinuxImproper handling of empty HTML attributes in html/template7.3 HighlibslirpAlmaLinuxImproper handling of JavaScript whitespace in html/template9.8 CriticallibslirpAlmaLinuxImproper sanitization of CSS values in html/template7.3 HighlibslirpAlmaLinuxBackticks not treated as string delimiters in html/template9.8 CriticallibslirpAlmaLinuxInfinite loop in parsing in go/scanner7.5 HighlibslirpAlmaLinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighlibslirpAlmaLinuxExcessive memory allocation in net/http and net/textproto7.5 HighlibslirpAlmaLinuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumlibslirpAlmaLinuxAppArmor bypass with symlinked /proc in runc6.1 MediumlibslirpAlmaLinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumlibslirpAlmaLinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighlibslirpAlmaLinuxExcessive resource consumption in mime/multipart7.5 HighlibslirpAlmaLinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighlibslirpAlmaLinuxPanic on large handshake records in crypto/tls7.5 HighlibslirpAlmaLinuxcontainerd supplementary groups are not set up properly5.3 MediumlibslirpAlmaLinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumlibslirpAlmaLinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighlibslirpAlmaLinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighlibslirpAlmaLinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighlibslirpAlmaLinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighlibslirpAlmaLinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighlibslirpAlmaLinuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighlibslirpAlmaLinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighlibslirpAlmaLinuxPanic when decoding Float and Rat types in math/big7.5 HighlibslirpAlmaLinuxExposure of client IP addresses in net/http6.5 MediumlibslirpAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighlibslirpAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighlibslirpAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 HighlibslirpAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighlibslirpAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighlibslirpAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighlibslirpAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 Medium- Show moreLoading…