podman vulnerabilities (Azure Linux)
101 vulnerabilities.
podmanAzure LinuxLogrus is vulnerable to DoS when using Entry.Writer()7.5 HighpodmanAzure LinuxPotential denial of service in golang.org/x/crypto/ssh/agent7.5 HighpodmanAzure LinuxInfinite parsing loop in golang.org/x/net5.3 MediumpodmanAzure LinuxUnbounded allocation when parsing GNU sparse map in archive/tar4.3 MediumpodmanAzure LinuxQuadratic parsing complexity in golang.org/x/net/html5.3 MediumpodmanAzure LinuxPodman: podman kube play command may overwrite host files8.1 HighpodmanAzure Linuxgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 MediumpodmanAzure LinuxGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumpodmanAzure LinuxPodman: podman missing tls verification8.3 HighpodmanAzure LinuxIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumpodmanAzure LinuxPotential denial of service in golang.org/x/crypto7.5 HighpodmanAzure LinuxGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumpodmanAzure LinuxWeaknesses in the generation of TCP/UDP source ports and some other header values in Google's...6.3 MediumpodmanAzure LinuxImproved Seeding and Hashing In gVisor6.3 MediumpodmanAzure LinuxPodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile8.6 HighpodmanAzure LinuxNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumpodmanAzure LinuxMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalpodmanAzure LinuxPodman: build context bind mount7.4 HighpodmanAzure LinuxPodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)6.5 MediumpodmanAzure LinuxBuildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction4.7 MediumpodmanAzure LinuxPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 MediumpodmanAzure Linuxrunc can be confused to create empty files/directories on the host3.6 LowpodmanAzure LinuxPodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack7.7 HighpodmanAzure LinuxPotential memory exhaustion attack due to sparse slice deserialization7.5 HighpodmanAzure LinuxContainers/image: digest type does not guarantee valid type8.3 HighpodmanAzure LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighpodmanAzure LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumpodmanAzure Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighpodmanAzure LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumpodmanAzure LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumpodmanAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighpodmanAzure LinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumpodmanAzure LinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumpodmanAzure LinuxBuildah (as part of Podman) vulnerable to Path Traversal3.3 LowpodmanAzure LinuxBuildah (as part of Podman) vulnerable to Link Following5.3 MediumpodmanAzure LinuxDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighpodmanAzure LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighpodmanAzure LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighpodmanAzure LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighpodmanAzure Linuxgolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 MediumpodmanAzure LinuxPodman publishes a malicious image to public registries8.8 HighpodmanAzure LinuxPodman's default inheritable capabilities for linux container not empty7.5 HighpodmanAzure Linuxgolang.org/x/text/language Out-of-bounds Read vulnerability7.5 HighpodmanAzure LinuxDenial of service in gopkg.in/yaml.v25.5 MediumpodmanAzure LinuxPodman Origin Validation Error5.9 MediumpodmanAzure Linuxgolang.org/x/text Infinite loop7.5 HighpodmanAzure LinuxKubernetes API Server denial of service vulnerability from malicious YAML payloads6.5 MediumpodmanAzure LinuxDocker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory...4.9 MediumpodmanAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical