netavark vulnerabilities (AlmaLinux)
117 vulnerabilities.
netavarkAlmaLinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighnetavarkAlmaLinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumnetavarkAlmaLinuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumnetavarkAlmaLinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumnetavarkAlmaLinuxComments in display names are incorrectly handled in net/mail7.5 HighnetavarkAlmaLinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumnetavarkAlmaLinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumnetavarkAlmaLinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighnetavarkAlmaLinuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighnetavarkAlmaLinuxDenial of service via chunk extensions in net/http5.3 MediumnetavarkAlmaLinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighnetavarkAlmaLinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighnetavarkAlmaLinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighnetavarkAlmaLinuxImproper handling of special tags within script contexts in html/template6.1 MediumnetavarkAlmaLinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumnetavarkAlmaLinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumnetavarkAlmaLinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumnetavarkAlmaLinuxInsufficient sanitization of Host header in net/http6.5 MediumnetavarkAlmaLinuxImproper handling of empty HTML attributes in html/template7.3 HighnetavarkAlmaLinuxImproper handling of JavaScript whitespace in html/template9.8 CriticalnetavarkAlmaLinuxImproper sanitization of CSS values in html/template7.3 HighnetavarkAlmaLinuxBackticks not treated as string delimiters in html/template9.8 CriticalnetavarkAlmaLinuxInfinite loop in parsing in go/scanner7.5 HighnetavarkAlmaLinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighnetavarkAlmaLinuxExcessive memory allocation in net/http and net/textproto7.5 HighnetavarkAlmaLinuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumnetavarkAlmaLinuxAppArmor bypass with symlinked /proc in runc6.1 MediumnetavarkAlmaLinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumnetavarkAlmaLinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighnetavarkAlmaLinuxExcessive resource consumption in mime/multipart7.5 HighnetavarkAlmaLinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighnetavarkAlmaLinuxPanic on large handshake records in crypto/tls7.5 HighnetavarkAlmaLinuxcontainerd supplementary groups are not set up properly5.3 MediumnetavarkAlmaLinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumnetavarkAlmaLinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighnetavarkAlmaLinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighnetavarkAlmaLinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighnetavarkAlmaLinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighnetavarkAlmaLinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighnetavarkAlmaLinuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighnetavarkAlmaLinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighnetavarkAlmaLinuxPanic when decoding Float and Rat types in math/big7.5 HighnetavarkAlmaLinuxExposure of client IP addresses in net/http6.5 MediumnetavarkAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighnetavarkAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighnetavarkAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 HighnetavarkAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighnetavarkAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighnetavarkAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighnetavarkAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 Medium- Show moreLoading…