cri-o vulnerabilities (Azure Linux)
105 vulnerabilities.
cri-oAzure LinuxInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 Mediumcri-oAzure Linuxgo-git: Crafted repositories may modify main and submodule .git directories5.4 Mediumcri-oAzure Linuxgo-git: Improper single-quote escaping in go-git SSH transport2.3 Lowcri-oAzure LinuxInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highcri-oAzure LinuxSpdyStream: DOS on CRI8.7 Highcri-oAzure LinuxUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumcri-oAzure LinuxSending certain HTTP/2 frames can cause a server to panic in golang.org/x/net7.5 Highcri-oAzure LinuxOpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking7.0 Highcri-oAzure LinuxRekor affected by Server-Side Request Forgery (SSRF) via provided public key URL5.3 Mediumcri-oAzure LinuxLogrus is vulnerable to DoS when using Entry.Writer()7.5 Highcri-oAzure LinuxPotential denial of service in golang.org/x/crypto/ssh/agent7.5 Highcri-oAzure LinuxInfinite parsing loop in golang.org/x/net5.3 Mediumcri-oAzure LinuxUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumcri-oAzure LinuxQuadratic parsing complexity in golang.org/x/net/html5.3 Mediumcri-oAzure Linuxgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 Mediumcri-oAzure LinuxGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 Mediumcri-oAzure LinuxIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 Mediumcri-oAzure LinuxPotential denial of service in golang.org/x/crypto7.5 Highcri-oAzure LinuxGo JOSE's Parsing Vulnerable to Denial of Service6.6 Mediumcri-oAzure LinuxCri-o: cri-o path traversal in log handling functions allows arbitrary unmounting6.6 Mediumcri-oAzure Linuxgo-git clients vulnerable to DoS via maliciously crafted Git server replies7.5 Highcri-oAzure Linuxgo-git has an Argument Injection via the URL field9.2 Criticalcri-oAzure LinuxNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 Mediumcri-oAzure LinuxMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticalcri-oAzure LinuxCri-o: checkpoint restore can be triggered from different namespaces7.4 Highcri-oAzure LinuxPodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)6.5 Mediumcri-oAzure LinuxInfinite loop in github.com/gomarkdown/markdown5.1 Mediumcri-oAzure LinuxPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 Mediumcri-oAzure Linuxrunc can be confused to create empty files/directories on the host3.6 Lowcri-oAzure Linuxgo-retryablehttp can leak basic auth credentials to log files6.0 Mediumcri-oAzure LinuxContainers/image: digest type does not guarantee valid type8.3 Highcri-oAzure LinuxCri-o: arbitrary command injection via pod annotation7.2 Highcri-oAzure LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 Mediumcri-oAzure Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 Highcri-oAzure LinuxMaliciously crafted Git server replies can lead to path traversal and RCE on go-git clients9.8 Criticalcri-oAzure LinuxCri-o: pods are able to break out of resource confinement on cgroupv26.5 Mediumcri-oAzure LinuxMaliciously crafted Git server replies can cause DoS on go-git clients7.5 Highcri-oAzure Linuxgithub.com/gomarkdown/markdown Out-of-bounds Read while parsing citations7.5 Highcri-oAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highcri-oAzure LinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 Mediumcri-oAzure LinuxCri-o: /etc/passwd tampering privesc7.8 Highcri-oAzure LinuxDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highcri-oAzure LinuxUnbounded memory consumption when reading headers in archive/tar7.5 Highcri-oAzure LinuxCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 Highcri-oAzure LinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 Highcri-oAzure Linuxgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Mediumcri-oAzure LinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 Mediumcri-oAzure LinuxCode Injection in CRI-O8.8 Highcri-oAzure LinuxUncontrolled Resource Consumption in promhttp7.5 Highcri-oAzure Linuxx/crypto/ssh vulnerable to panic via malformed packets7.5 High- Show moreLoading…