rpm-ostree vulnerabilities (Azure Linux)
11 vulnerabilities.
-
rpm-ostreeAzure Linux Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes 8.8 High -
rpm-ostreeAzure Linux tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all() 7.1 High -
rpm-ostreeAzure Linux tar-rs: unpack_in can chmod arbitrary directories by following symlinks 5.1 Medium -
rpm-ostreeAzure Linux tar-rs incorrectly ignores PAX size headers if header size is nonzero 5.1 Medium -
rpm-ostreeAzure Linux Bytes is vulnerable to integer overflow in BytesMut::reserve 5.5 Medium -
rpm-ostreeAzure Linux Tracing logging user input may result in poisoning logs with ANSI escape sequences 2.3 Low -
rpm-ostreeAzure Linux Rpm-ostree: world-readable /etc/shadow file 6.2 Medium -
rpm-ostreeAzure Linux Mio's tokens for named pipes may be delivered after deregistration 7.5 High -
rpm-ostreeAzure Linux libostree vulnerable to denial of service attack 7.5 High -
rpm-ostreeAzure Linux h2 vulnerable to denial of service 7.5 High -
rpm-ostreeAzure Linux Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method... 7.5 High