kubevirt vulnerabilities (Azure Linux)
73 vulnerabilities.
kubevirtAzure LinuxKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer4.7 MediumkubevirtAzure LinuxInfinite parsing loop in golang.org/x/net5.3 MediumkubevirtAzure LinuxQuadratic parsing complexity in golang.org/x/net/html5.3 MediumkubevirtAzure LinuxGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumkubevirtAzure LinuxIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumkubevirtAzure Linuxjwt-go allows excessive memory allocation during header parsing7.5 HighkubevirtAzure LinuxPotential denial of service in golang.org/x/crypto7.5 HighkubevirtAzure LinuxNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumkubevirtAzure LinuxMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalkubevirtAzure LinuxBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowkubevirtAzure Linuxkubevirt allows a local attacker to execute arbitrary code via a crafted command5.9 MediumkubevirtAzure LinuxHTTP/2 CONTINUATION flood in net/http7.5 HighkubevirtAzure LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighkubevirtAzure Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighkubevirtAzure LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumkubevirtAzure LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumkubevirtAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighkubevirtAzure LinuxOn a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs8.2 HighkubevirtAzure LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighkubevirtAzure LinuxDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighkubevirtAzure LinuxPath Traversal vulnerability in Kubevirt8.7 HighkubevirtAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical