libcontainers-common vulnerabilities (Azure Linux)
33 vulnerabilities.
-
libcontainers-commonAzure Linux Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net 6.1 Medium -
libcontainers-commonAzure Linux Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 7.5 High -
libcontainers-commonAzure Linux compress zstd: Panic on two-block frames 8.7 High -
libcontainers-commonAzure Linux Go JOSE: DoS when parsing JWKs that contain RSA keys 7.5 High -
libcontainers-commonAzure Linux Go JOSE: Panics in JSON parsing 6.9 Medium -
libcontainers-commonAzure Linux Go JOSE: Panic during CBC-HMAC processing 6.9 Medium -
libcontainers-commonAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
libcontainers-commonAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
libcontainers-commonAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
libcontainers-commonAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
libcontainers-commonAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
libcontainers-commonAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
libcontainers-commonAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
libcontainers-commonAzure Linux Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation 10.0 Critical -
libcontainers-commonAzure Linux Podman: arbitrary file write when importing oci archive 5.5 Medium -
libcontainers-commonAzure Linux Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory 4.4 Medium -
libcontainers-commonAzure Linux Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers 4.5 Medium -
libcontainers-commonAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
libcontainers-commonAzure Linux Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
libcontainers-commonAzure Linux Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
libcontainers-commonAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
libcontainers-commonAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
libcontainers-commonAzure Linux Potential memory exhaustion attack due to sparse slice deserialization 7.5 High -
libcontainers-commonAzure Linux go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
libcontainers-commonAzure Linux Containers/image: digest type does not guarantee valid type 8.3 High -
libcontainers-commonAzure Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
libcontainers-commonAzure Linux Buildah: buildah: container escape via improper bind mount validation 8.6 High -
libcontainers-commonAzure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
libcontainers-commonAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
libcontainers-commonAzure Linux Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
libcontainers-commonAzure Linux Unbounded memory consumption when reading headers in archive/tar 7.5 High -
libcontainers-commonAzure Linux x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
libcontainers-commonAzure Linux golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High