kata-containers-cc vulnerabilities (Azure Linux)
46 vulnerabilities.
-
kata-containers-ccAzure Linux compress zstd: Panic on two-block frames 8.7 High -
kata-containers-ccAzure Linux containerd: Unpack DoS via repeated opaque whiteouts 4.6 Medium -
kata-containers-ccAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
kata-containers-ccAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
kata-containers-ccAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
kata-containers-ccAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
kata-containers-ccAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
kata-containers-ccAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
kata-containers-ccAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
kata-containers-ccAzure Linux Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count 8.7 High -
kata-containers-ccAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) 8.2 High -
kata-containers-ccAzure Linux Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) 8.7 High -
kata-containers-ccAzure Linux Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame 8.2 High -
kata-containers-ccAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
kata-containers-ccAzure Linux OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation 5.1 Medium -
kata-containers-ccAzure Linux OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs 2.0 Low -
kata-containers-ccAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
kata-containers-ccAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
kata-containers-ccAzure Linux tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all() 7.1 High -
kata-containers-ccAzure Linux Kata Containers: Config Path Annotation Arbitrary File Loading 9.6 Critical -
kata-containers-ccAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
kata-containers-ccAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() 8.7 High -
kata-containers-ccAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit 8.7 High -
kata-containers-ccAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit 8.7 High -
kata-containers-ccAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
kata-containers-ccAzure Linux Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion 7.4 High -
kata-containers-ccAzure Linux Off-by-One Leading to Out-of-Bounds Write in bzip2 4.8 Medium -
kata-containers-ccAzure Linux Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations 5.8 Medium -
kata-containers-ccAzure Linux Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
kata-containers-ccAzure Linux Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
kata-containers-ccAzure Linux rustls-webpki before 0.103.13 Panic via empty BIT STRING 8.7 High -
kata-containers-ccAzure Linux rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass 2.1 Low -
kata-containers-ccAzure Linux rustls webpki Name Constraints URI Validation Bypass 2.1 Low -
kata-containers-ccAzure Linux rustls-webpki before 0.103.10 CRL Revocation Check Bypass 5.9 Medium -
kata-containers-ccAzure Linux Crossbeam-channel: crossbeam-channel vulnerable to double free on drop 6.5 Medium -
kata-containers-ccAzure Linux Users: `root` appended to group listings 7.1 High -
kata-containers-ccAzure Linux Crash due to uncontrolled recursion in protobuf crate 5.9 Medium -
kata-containers-ccAzure Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
kata-containers-ccAzure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
kata-containers-ccAzure Linux `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion 6.5 Medium -
kata-containers-ccAzure Linux HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
kata-containers-ccAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
kata-containers-ccAzure Linux Possible DoS translating ASN.1 object identifiers 6.5 Medium -
kata-containers-ccAzure Linux Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
kata-containers-ccAzure Linux Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
kata-containers-ccAzure Linux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical