buildah vulnerabilities (Azure Linux)
79 vulnerabilities.
buildahAzure LinuxPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 MediumbuildahAzure Linuxrunc can be confused to create empty files/directories on the host3.6 LowbuildahAzure LinuxContainers/image: digest type does not guarantee valid type8.3 HighbuildahAzure LinuxGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighbuildahAzure LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighbuildahAzure LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumbuildahAzure Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighbuildahAzure LinuxDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighbuildahAzure LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighbuildahAzure LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighbuildahAzure LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighbuildahAzure Linuxgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumbuildahAzure LinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumbuildahAzure LinuxUncontrolled Resource Consumption in promhttp7.5 HighbuildahAzure Linuxgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighbuildahAzure LinuxClarify Content-Type handling in OCI spec3.0 LowbuildahAzure Linuxgolang.org/x/text/language Out-of-bounds Read vulnerability7.5 HighbuildahAzure LinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 MediumbuildahAzure Linuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighbuildahAzure LinuxDenial of service in gopkg.in/yaml.v25.5 MediumbuildahAzure LinuxImproper Locking in github.com/containers/storage6.5 MediumbuildahAzure Linuxcontainernetworking/cni improper limitation of path name7.2 HighbuildahAzure LinuxIn x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language...7.5 HighbuildahAzure LinuxIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 HighbuildahAzure Linuxgolang.org/x/text Infinite loop7.5 HighbuildahAzure LinuxKubernetes API Server denial of service vulnerability from malicious YAML payloads6.5 MediumbuildahAzure LinuxDocker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory...4.9 MediumbuildahAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical