udica vulnerabilities (AlmaLinux)
144 vulnerabilities.
udicaAlmaLinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumudicaAlmaLinuxSession tickets lack random ticket_age_add in crypto/tls3.1 LowudicaAlmaLinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighudicaAlmaLinuxIncorrect Default Permissions in runc5.9 MediumudicaAlmaLinuxcontainer-tools:4.0 bug fix updateNo scoreudicaAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scoreudicaAlmaLinuxnew module: container-tools:4.0No scoreudicaAlmaLinuxPodman publishes a malicious image to public registries8.8 HighudicaAlmaLinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 HighudicaAlmaLinuxPodman's default inheritable capabilities for linux container not empty7.5 HighudicaAlmaLinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumudicaAlmaLinuxgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighudicaAlmaLinuxUncontrolled Resource Consumption in promhttp7.5 HighudicaAlmaLinuxcontainer-tools:rhel8 security, bug fix, and enhancement updateNo scoreudicaAlmaLinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumudicaAlmaLinuxcontainer-tools:3.0 bug fix updateNo scoreudicaAlmaLinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 MediumudicaAlmaLinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighudicaAlmaLinuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighudicaAlmaLinuxnew module: container-tools:3.0No scoreudicaAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scoreudicaAlmaLinuxImproper Locking in github.com/containers/storage6.5 MediumudicaAlmaLinuxcontainer-tools:2.0 bug fix updateNo scoreudicaAlmaLinuxPodman Origin Validation Error5.9 MediumudicaAlmaLinuxIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 HighudicaAlmaLinuxgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 HighudicaAlmaLinuxcontainer-tools:2.0 bug fix updateNo scoreudicaAlmaLinuxGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighudicaAlmaLinuxcontainer-tools:2.0 bug fix updateNo scoreudicaAlmaLinuxcontainer-tools:2.0 bug fix and enhancement updateNo scoreudicaAlmaLinuxInformation disclosure in podman5.3 MediumudicaAlmaLinuxImproper Authorization in github.com/containers/libpod7.0 HighudicaAlmaLinuxcontainer-tools:2.0 bug fix updateNo scoreudicaAlmaLinuxcontainer-tools:2.0 bug fix updateNo scoreudicaAlmaLinuxcontainer-tools:rhel8 bug fix updateNo scoreudicaAlmaLinuxnew module: container-tools:2.0No scoreudicaAlmaLinuxA malicious container image can consume an unbounded amount of memory when being pulled to a...3.3 LowudicaAlmaLinuxlibslirp: use after free vulnerability cause a denial of service.7.5 HighudicaAlmaLinuxPath Traversal in Buildah8.8 HighudicaAlmaLinuxPodman has Files or Directories Accessible to External Parties5.9 MediumudicaAlmaLinuxopencontainers runc contains procfs race condition with a shared volume mount7.0 HighudicaAlmaLinuxIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 MediumudicaAlmaLinuxtcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 MediumudicaAlmaLinuxlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 High