cloud-hypervisor vulnerabilities (Azure Linux)
29 vulnerabilities.
-
cloud-hypervisorAzure Linux Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow 9.4 Critical -
cloud-hypervisorAzure Linux Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports 5.9 Medium -
cloud-hypervisorAzure Linux QUIC STREAM Fragment Metadata DoS 7.5 High -
cloud-hypervisorAzure Linux Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC 5.3 Medium -
cloud-hypervisorAzure Linux QUIC: Unbounded RETIRE_CONNECTION_ID Backlog 7.5 High -
cloud-hypervisorAzure Linux Timing Side-Channel in SM2 Signature Generation 3.7 Low -
cloud-hypervisorAzure Linux Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
cloud-hypervisorAzure Linux NULL Pointer Dereference in CMP Client Revocation Response Handling 5.3 Medium -
cloud-hypervisorAzure Linux QUIC Connection-Level Flow Control is Not Enforced for Streams 5.3 Medium -
cloud-hypervisorAzure Linux Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake 7.5 High -
cloud-hypervisorAzure Linux Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V 3.7 Low -
cloud-hypervisorAzure Linux Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
cloud-hypervisorAzure Linux QUIC Unvalidated Amplification Credit may be Over Accounted 3.7 Low -
cloud-hypervisorAzure Linux Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
cloud-hypervisorAzure Linux zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate 8.3 High -
cloud-hypervisorAzure Linux DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
cloud-hypervisorAzure Linux Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 9.8 Critical -
cloud-hypervisorAzure Linux Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse 9.1 Critical -
cloud-hypervisorAzure Linux A heap-based buffer over-read or buffer overflow in tildearrow/furnace 10.0 Critical -
cloud-hypervisorAzure Linux Out-of-bounds Write in radare2 10.0 Critical -
cloud-hypervisorAzure Linux `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access 5.7 Medium -
cloud-hypervisorAzure Linux `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion 6.5 Medium -
cloud-hypervisorAzure Linux pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency 9.8 Critical -
cloud-hypervisorAzure Linux Malicious HTTP requests could close arbitrary opening file descriptors in cloud-hypervisor 4.0 Medium -
cloud-hypervisorAzure Linux Versionize is lacking bound checks, potentially leading to out of bounds memory access 5.7 Medium -
cloud-hypervisorAzure Linux X.400 address type confusion in X.509 GeneralName 7.4 High -
cloud-hypervisorAzure Linux Use-after-free following BIO_new_NDEF 7.5 High -
cloud-hypervisorAzure Linux Double free after calling PEM_read_bio_ex 7.5 High -
cloud-hypervisorAzure Linux Timing Oracle in RSA Decryption 5.9 Medium