slirp4netns vulnerabilities (AlmaLinux)
145 vulnerabilities.
slirp4netnsAlmaLinuxBuildah: buildah: container escape via improper bind mount validation8.6 Highslirp4netnsAlmaLinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 Mediumslirp4netnsAlmaLinuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 Mediumslirp4netnsAlmaLinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 Mediumslirp4netnsAlmaLinuxComments in display names are incorrectly handled in net/mail7.5 Highslirp4netnsAlmaLinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumslirp4netnsAlmaLinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumslirp4netnsAlmaLinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 Highslirp4netnsAlmaLinuxrunc container breakout through process.cwd trickery and leaked fds8.6 Highslirp4netnsAlmaLinuxDenial of service via chunk extensions in net/http5.3 Mediumslirp4netnsAlmaLinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 Highslirp4netnsAlmaLinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 Highslirp4netnsAlmaLinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 Highslirp4netnsAlmaLinuxImproper handling of special tags within script contexts in html/template6.1 Mediumslirp4netnsAlmaLinuxImproper handling of HTML-like comments in script contexts in html/template6.1 Mediumslirp4netnsAlmaLinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumslirp4netnsAlmaLinuxImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumslirp4netnsAlmaLinuxInsufficient sanitization of Host header in net/http6.5 Mediumslirp4netnsAlmaLinuxImproper handling of empty HTML attributes in html/template7.3 Highslirp4netnsAlmaLinuxImproper handling of JavaScript whitespace in html/template9.8 Criticalslirp4netnsAlmaLinuxImproper sanitization of CSS values in html/template7.3 Highslirp4netnsAlmaLinuxBackticks not treated as string delimiters in html/template9.8 Criticalslirp4netnsAlmaLinuxInfinite loop in parsing in go/scanner7.5 Highslirp4netnsAlmaLinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 Highslirp4netnsAlmaLinuxExcessive memory allocation in net/http and net/textproto7.5 Highslirp4netnsAlmaLinuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 Mediumslirp4netnsAlmaLinuxAppArmor bypass with symlinked /proc in runc6.1 Mediumslirp4netnsAlmaLinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 Mediumslirp4netnsAlmaLinuxOpencontainers runc Incorrect Authorization vulnerability7.0 Highslirp4netnsAlmaLinuxExcessive resource consumption in mime/multipart7.5 Highslirp4netnsAlmaLinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highslirp4netnsAlmaLinuxPanic on large handshake records in crypto/tls7.5 Highslirp4netnsAlmaLinuxcontainerd supplementary groups are not set up properly5.3 Mediumslirp4netnsAlmaLinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 Mediumslirp4netnsAlmaLinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highslirp4netnsAlmaLinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highslirp4netnsAlmaLinuxUnbounded memory consumption when reading headers in archive/tar7.5 Highslirp4netnsAlmaLinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 Highslirp4netnsAlmaLinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 Highslirp4netnsAlmaLinuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highslirp4netnsAlmaLinuxExcessive resource consumption in gopkg.in/yaml.v27.5 Highslirp4netnsAlmaLinuxPanic when decoding Float and Rat types in math/big7.5 Highslirp4netnsAlmaLinuxExposure of client IP addresses in net/http6.5 Mediumslirp4netnsAlmaLinuxStack exhaustion when decoding certain messages in encoding/gob7.5 Highslirp4netnsAlmaLinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highslirp4netnsAlmaLinuxStack exhaustion on crafted paths in path/filepath7.5 Highslirp4netnsAlmaLinuxStack exhaustion when reading certain archives in compress/gzip7.5 Highslirp4netnsAlmaLinuxStack exhaustion in Glob on certain paths in io/fs7.5 Highslirp4netnsAlmaLinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highslirp4netnsAlmaLinuxStack exhaustion due to deeply nested types in go/parser5.5 Medium- Show moreLoading…