kata-containers-preview vulnerabilities (Azure Linux)
38 vulnerabilities.
-
kata-containers-previewAzure Linux compress zstd: Panic on two-block frames 8.7 High -
kata-containers-previewAzure Linux containerd: Unpack DoS via repeated opaque whiteouts 4.6 Medium -
kata-containers-previewAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
kata-containers-previewAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
kata-containers-previewAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
kata-containers-previewAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
kata-containers-previewAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
kata-containers-previewAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
kata-containers-previewAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
kata-containers-previewAzure Linux Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count 8.7 High -
kata-containers-previewAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) 8.2 High -
kata-containers-previewAzure Linux Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) 8.7 High -
kata-containers-previewAzure Linux Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame 8.2 High -
kata-containers-previewAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
kata-containers-previewAzure Linux OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs 2.0 Low -
kata-containers-previewAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
kata-containers-previewAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
kata-containers-previewAzure Linux Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy 8.1 High -
kata-containers-previewAzure Linux Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory 5.7 Medium -
kata-containers-previewAzure Linux Kata Containers: Config Path Annotation Arbitrary File Loading 9.6 Critical -
kata-containers-previewAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
kata-containers-previewAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() 8.7 High -
kata-containers-previewAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit 8.7 High -
kata-containers-previewAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit 8.7 High -
kata-containers-previewAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
kata-containers-previewAzure Linux containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 9.4 Critical -
kata-containers-previewAzure Linux cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow 4.8 Medium -
kata-containers-previewAzure Linux Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs 9.2 Critical -
kata-containers-previewAzure Linux Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows 3.3 Low -
kata-containers-previewAzure Linux Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
kata-containers-previewAzure Linux Apache Thrift: Go TFramedTransport uint32 overflow 7.5 High -
kata-containers-previewAzure Linux OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification) 7.5 High -
kata-containers-previewAzure Linux Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net 7.5 High -
kata-containers-previewAzure Linux OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking 7.0 High -
kata-containers-previewAzure Linux Tracing logging user input may result in poisoning logs with ANSI escape sequences 2.3 Low -
kata-containers-previewAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
kata-containers-previewAzure Linux environment variable leak 6.3 Medium -
kata-containers-previewAzure Linux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical