terraform vulnerabilities (Azure Linux)
16 vulnerabilities.
-
terraformAzure Linux Quadratic parsing complexity in golang.org/x/net/html 5.3 Medium -
terraformAzure Linux github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives 5.3 Medium -
terraformAzure Linux Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
terraformAzure Linux jwt-go allows excessive memory allocation during header parsing 7.5 High -
terraformAzure Linux Potential denial of service in golang.org/x/crypto 7.5 High -
terraformAzure Linux Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
terraformAzure Linux HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation 8.4 High -
terraformAzure Linux go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
terraformAzure Linux HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches 9.8 Critical -
terraformAzure Linux Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
terraformAzure Linux Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
terraformAzure Linux Terraform Allows Arbitrary File Write During Init Operation 6.3 Medium -
terraformAzure Linux Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
terraformAzure Linux Go-Getter Vulnerable to Decompression Bombs 4.2 Medium -
terraformAzure Linux Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
terraformAzure Linux HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization... 8.8 High