telegraf vulnerabilities (Azure Linux)
115 vulnerabilities.
telegrafAzure LinuxNATS Server: Route API Auth Bypass8.8 HightelegrafAzure LinuxNATS Server: Queue Subscribe Authz Bypass6.5 MediumtelegrafAzure LinuxPion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message6.3 MediumtelegrafAzure LinuxInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 MediumtelegrafAzure LinuxInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 MediumtelegrafAzure LinuxInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 MediumtelegrafAzure LinuxInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 MediumtelegrafAzure LinuxInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 MediumtelegrafAzure LinuxInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3 MediumtelegrafAzure LinuxInvoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh7.5 HightelegrafAzure LinuxInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 CriticaltelegrafAzure LinuxInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh5.3 MediumtelegrafAzure LinuxInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1 CriticaltelegrafAzure LinuxInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1 CriticaltelegrafAzure LinuxInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 CriticaltelegrafAzure LinuxInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 CriticaltelegrafAzure LinuxInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 HightelegrafAzure LinuxInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 MediumtelegrafAzure LinuxInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 MediumtelegrafAzure LinuxPrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 HightelegrafAzure LinuxPrometheus Azure AD remote write OAuth client secret exposed via config API7.5 HightelegrafAzure LinuxApache Thrift: Go TFramedTransport uint32 overflow7.5 HightelegrafAzure Linuxpgx: SQL Injection via placeholder confusion with dollar quoted string literals2.3 LowtelegrafAzure Linuxgoldmark vulnerable to Cross-site Scripting (XSS)5.1 MediumtelegrafAzure LinuxNATS has MQTT plaintext password disclosure8.6 HightelegrafAzure LinuxNATS Server panic via malicious compression on leafnode port7.5 HightelegrafAzure LinuxInfinite loop in github.com/antchfx/xpath7.5 HightelegrafAzure Linuxnats-server websockets are vulnerable to pre-auth memory DoS5.9 MediumtelegrafAzure Linuxfilippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity1.7 LowtelegrafAzure LinuxPion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key5.9 MediumtelegrafAzure LinuxHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 MediumtelegrafAzure LinuxEclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes6.3 MediumtelegrafAzure LinuxPotential denial of service in golang.org/x/crypto/ssh/agent7.5 HightelegrafAzure LinuxInfinite parsing loop in golang.org/x/net5.3 MediumtelegrafAzure LinuxQuadratic parsing complexity in golang.org/x/net/html5.3 MediumtelegrafAzure LinuxGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 MediumtelegrafAzure LinuxGo Snowflake Driver has race condition when checking access to Easy Logging configuration file3.3 LowtelegrafAzure LinuxIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumtelegrafAzure LinuxNATS-Server Fails to Authorize Certain Jetstream Admin APIs9.6 CriticaltelegrafAzure Linuxjwt-go allows excessive memory allocation during header parsing7.5 HightelegrafAzure Linuxgo-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment3.7 LowtelegrafAzure LinuxHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 MediumtelegrafAzure LinuxPotential denial of service in golang.org/x/crypto7.5 HightelegrafAzure LinuxUnexpected memory consumption during token parsing in golang.org/x/oauth27.5 HightelegrafAzure LinuxGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumtelegrafAzure LinuxNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumtelegrafAzure LinuxMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticaltelegrafAzure LinuxBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowtelegrafAzure LinuxPotential memory exhaustion attack due to sparse slice deserialization7.5 HightelegrafAzure LinuxAzure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability5.5 Medium- Show moreLoading…