git-lfs vulnerabilities (Azure Linux)
13 vulnerabilities.
-
git-lfsAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
git-lfsAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
git-lfsAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
git-lfsAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
git-lfsAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
git-lfsAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
git-lfsAzure Linux HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
git-lfsAzure Linux Git LFS permits exfiltration of credentials via crafted HTTP URLs 8.5 High -
git-lfsAzure Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
git-lfsAzure Linux HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
git-lfsAzure Linux Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
git-lfsAzure Linux golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
git-lfsAzure Linux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical