telegraf vulnerabilities (Azure Linux)
115 vulnerabilities.
-
telegrafAzure Linux Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers 6.5 Medium -
telegrafAzure Linux gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments 5.9 Medium -
telegrafAzure Linux Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects 6.3 Medium -
telegrafAzure Linux Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net 6.1 Medium -
telegrafAzure Linux Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 7.5 High -
telegrafAzure Linux compress zstd: Panic on two-block frames 8.7 High -
telegrafAzure Linux Go JOSE: DoS when parsing JWKs that contain RSA keys 7.5 High -
telegrafAzure Linux Go JOSE: Panics in JSON parsing 6.9 Medium -
telegrafAzure Linux Go JOSE: Panic during CBC-HMAC processing 6.9 Medium -
telegrafAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
telegrafAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
telegrafAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
telegrafAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
telegrafAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
telegrafAzure Linux Application denial of service via missing BSON array length validation in MongoDB Go Driver 8.2 High -
telegrafAzure Linux Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver 8.2 High -
telegrafAzure Linux Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count 8.7 High -
telegrafAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) 8.2 High -
telegrafAzure Linux Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) 8.7 High -
telegrafAzure Linux Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame 8.2 High -
telegrafAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes a… 8.7 High -
telegrafAzure Linux RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking 8.2 High -
telegrafAzure Linux RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr 9.5 Critical -
telegrafAzure Linux RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client 8.9 High -
telegrafAzure Linux RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser 9.4 Critical -
telegrafAzure Linux RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation 8.9 High -
telegrafAzure Linux RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration 8.2 High -
telegrafAzure Linux RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation 8.9 High -
telegrafAzure Linux RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields 7.0 High -
telegrafAzure Linux RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow 9.1 Critical -
telegrafAzure Linux Uncontrolled Memory Allocation in cel-go 6.9 Medium -
telegrafAzure Linux gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
telegrafAzure Linux Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
telegrafAzure Linux Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
telegrafAzure Linux gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation 8.7 High -
telegrafAzure Linux grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X... 9.8 Critical -
telegrafAzure Linux amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload 8.9 High -
telegrafAzure Linux gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser 7.5 High -
telegrafAzure Linux github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files 5.5 Medium -
telegrafAzure Linux GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS 6.9 Medium -
telegrafAzure Linux Integer Overflow or Wraparound and Out-of-bounds Write in compress 7.5 High -
telegrafAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable() 8.7 High -
telegrafAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit 8.7 High -
telegrafAzure Linux Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit 8.7 High -
telegrafAzure Linux Infinite loop on invalid input in golang.org/x/text 7.5 High -
telegrafAzure Linux NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled 6.8 Medium -
telegrafAzure Linux NATS Server: Remote crash via integer overflow in Connz pagination 7.7 High -
telegrafAzure Linux NATS Server: MQTT retained and QoS replay bypass subscribe deny filters 4.3 Medium -
telegrafAzure Linux NATS Server: Pre-auth server crash via double INFO in leafnode handshake 7.5 High -
telegrafAzure Linux NATS Server: Subscribe Authz Bypass via Wildcard-Overlap 6.5 Medium - Show olderLoading…