runc vulnerabilities (Alpaquita)
16 vulnerabilities.
-
runcAlpaquita HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
runcAlpaquita Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
runcAlpaquita Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
runcAlpaquita Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 7.5 High -
runcAlpaquita runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations 3.3 Low -
runcAlpaquita Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
runcAlpaquita Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
runcAlpaquita Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
runcAlpaquita Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
runcAlpaquita Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
runcAlpaquita runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High -
runcAlpaquita container escape due to /dev/console mount and related races 8.4 High -
runcAlpaquita runc container escape via "masked path" abuse due to mount race conditions 7.3 High -
runcAlpaquita runc can be confused to create empty files/directories on the host 3.6 Low -
runcAlpaquita runc container breakout through process.cwd trickery and leaked fds 8.6 High -
runcAlpaquita Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical