kata-containers vulnerabilities (Azure Linux)
63 vulnerabilities.
-
kata-containersAzure Linux compress zstd: Panic on two-block frames 8.7 High -
kata-containersAzure Linux containerd: Unpack DoS via repeated opaque whiteouts 4.6 Medium -
kata-containersAzure Linux Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 9.1 Critical -
kata-containersAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
kata-containersAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
kata-containersAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
kata-containersAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
kata-containersAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
kata-containersAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
kata-containersAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
kata-containersAzure Linux Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count 8.7 High -
kata-containersAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) 8.2 High -
kata-containersAzure Linux Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) 8.7 High -
kata-containersAzure Linux Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame 8.2 High -
kata-containersAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
kata-containersAzure Linux QUIC STREAM Fragment Metadata DoS 7.5 High -
kata-containersAzure Linux Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC 5.3 Medium -
kata-containersAzure Linux QUIC: Unbounded RETIRE_CONNECTION_ID Backlog 7.5 High -
kata-containersAzure Linux Timing Side-Channel in SM2 Signature Generation 3.7 Low -
kata-containersAzure Linux Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
kata-containersAzure Linux NULL Pointer Dereference in CMP Client Revocation Response Handling 5.3 Medium -
kata-containersAzure Linux QUIC Connection-Level Flow Control is Not Enforced for Streams 5.3 Medium -
kata-containersAzure Linux Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake 7.5 High -
kata-containersAzure Linux Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V 3.7 Low -
kata-containersAzure Linux Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
kata-containersAzure Linux QUIC Unvalidated Amplification Credit may be Over Accounted 3.7 Low -
kata-containersAzure Linux Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
kata-containersAzure Linux OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs 2.0 Low -
kata-containersAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
kata-containersAzure Linux zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate 8.3 High -
kata-containersAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
kata-containersAzure Linux DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
kata-containersAzure Linux Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy 8.1 High -
kata-containersAzure Linux tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all() 7.1 High -
kata-containersAzure Linux Kata Containers: Config Path Annotation Arbitrary File Loading 9.6 Critical -
kata-containersAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
kata-containersAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
kata-containersAzure Linux Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations 5.8 Medium -
kata-containersAzure Linux Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
kata-containersAzure Linux Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
kata-containersAzure Linux Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 9.8 Critical -
kata-containersAzure Linux Kata Container to Guest micro VM privilege escalation 9.4 Critical -
kata-containersAzure Linux zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because... 2.9 Low -
kata-containersAzure Linux time affected by a stack exhaustion denial of service attack 6.8 Medium -
kata-containersAzure Linux Bytes is vulnerable to integer overflow in BytesMut::reserve 5.5 Medium -
kata-containersAzure Linux Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers 8.8 High -
kata-containersAzure Linux Logrus is vulnerable to DoS when using Entry.Writer() 7.5 High -
kata-containersAzure Linux Tracing logging user input may result in poisoning logs with ANSI escape sequences 2.3 Low -
kata-containersAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
kata-containersAzure Linux Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 6.5 Medium - Show olderLoading…