kubevirt vulnerabilities (Azure Linux)
72 vulnerabilities.
-
kubevirtAzure Linux Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net 6.1 Medium -
kubevirtAzure Linux Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 7.5 High -
kubevirtAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
kubevirtAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
kubevirtAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
kubevirtAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
kubevirtAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
kubevirtAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
kubevirtAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
kubevirtAzure Linux Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume 6.5 Medium -
kubevirtAzure Linux go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal 8.7 High -
kubevirtAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
kubevirtAzure Linux Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
kubevirtAzure Linux Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
kubevirtAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
kubevirtAzure Linux Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host 8.8 High -
kubevirtAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
kubevirtAzure Linux Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone 7.7 High -
kubevirtAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
kubevirtAzure Linux Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service 3.8 Low -
kubevirtAzure Linux Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip 6.4 Medium -
kubevirtAzure Linux Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher 4.2 Medium -
kubevirtAzure Linux Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body 6.5 Medium -
kubevirtAzure Linux Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption 7.3 High -
kubevirtAzure Linux Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read 7.7 High -
kubevirtAzure Linux Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability 9.9 Critical -
kubevirtAzure Linux Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html 6.1 Medium -
kubevirtAzure Linux Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html 6.1 Medium -
kubevirtAzure Linux Invoking duplicate attributes can cause XSS in golang.org/x/net/html 6.1 Medium -
kubevirtAzure Linux Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html 6.1 Medium -
kubevirtAzure Linux Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html 6.5 Medium -
kubevirtAzure Linux Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
kubevirtAzure Linux Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
kubevirtAzure Linux Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
kubevirtAzure Linux Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
kubevirtAzure Linux Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
kubevirtAzure Linux Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
kubevirtAzure Linux Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
kubevirtAzure Linux Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
kubevirtAzure Linux SpdyStream: DOS on CRI 8.7 High -
kubevirtAzure Linux Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation 5.4 Medium -
kubevirtAzure Linux Virt-cdi-controller: unauthorized pvc cloning via dataimportcron 8.5 High -
kubevirtAzure Linux Logrus is vulnerable to DoS when using Entry.Writer() 7.5 High -
kubevirtAzure Linux Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
kubevirtAzure Linux KubeVirt Vulnerable to Arbitrary Host File Read and Write 8.5 High -
kubevirtAzure Linux KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes 5.0 Medium -
kubevirtAzure Linux KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes 6.9 Medium -
kubevirtAzure Linux KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation 5.3 Medium -
kubevirtAzure Linux KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing 4.7 Medium -
kubevirtAzure Linux KubeVirt Arbitrary Container File Read 6.5 Medium - Show olderLoading…