influxdb vulnerabilities (Azure Linux)
49 vulnerabilities.
-
influxdbAzure Linux Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 6.5 Medium -
influxdbAzure Linux Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net 6.1 Medium -
influxdbAzure Linux Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 7.5 High -
influxdbAzure Linux compress zstd: Panic on two-block frames 8.7 High -
influxdbAzure Linux Go JOSE: DoS when parsing JWKs that contain RSA keys 7.5 High -
influxdbAzure Linux Go JOSE: Panics in JSON parsing 6.9 Medium -
influxdbAzure Linux Go JOSE: Panic during CBC-HMAC processing 6.9 Medium -
influxdbAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
influxdbAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
influxdbAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
influxdbAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
influxdbAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
influxdbAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
influxdbAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
influxdbAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
influxdbAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() 8.7 High -
influxdbAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit 8.7 High -
influxdbAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit 8.7 High -
influxdbAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
influxdbAzure Linux go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware 6.9 Medium -
influxdbAzure Linux go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For 6.9 Medium -
influxdbAzure Linux Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
influxdbAzure Linux Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
influxdbAzure Linux Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
influxdbAzure Linux Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
influxdbAzure Linux Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
influxdbAzure Linux Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
influxdbAzure Linux Logrus is vulnerable to DoS when using Entry.Writer() 7.5 High -
influxdbAzure Linux Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes 6.3 Medium -
influxdbAzure Linux Infinite parsing loop in golang.org/x/net 5.3 Medium -
influxdbAzure Linux Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
influxdbAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
influxdbAzure Linux Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net 6.5 Medium -
influxdbAzure Linux jwt-go allows excessive memory allocation during header parsing 7.5 High -
influxdbAzure Linux HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
influxdbAzure Linux Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
influxdbAzure Linux Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
influxdbAzure Linux Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
influxdbAzure Linux InfluxDB through 2.7.10 allows allAccess administrators to retrieve all raw tokens via an "influx... 9.1 Critical -
influxdbAzure Linux Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
influxdbAzure Linux go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
influxdbAzure Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
influxdbAzure Linux Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) 4.3 Medium -
influxdbAzure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
influxdbAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
influxdbAzure Linux Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
influxdbAzure Linux Insufficient randomness in github.com/Masterminds/goutils 9.1 Critical -
influxdbAzure Linux Loop with Unreachable Exit Condition in Apache Thrift 7.5 High -
influxdbAzure Linux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical