butane vulnerabilities (Red Hat)
104 vulnerabilities.
butaneRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 HighbutaneRed HatPanic when decoding Float and Rat types in math/big7.5 HighbutaneRed HatExposure of client IP addresses in net/http6.5 MediumbutaneRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighbutaneRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumbutaneRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 LowbutaneRed HatIncorrect Default Permissions in runc5.9 MediumbutaneRed HatIgnition config accessible to unprivileged software on VMware6.5 MediumbutaneRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighbutaneRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighbutaneRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighbutaneRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighbutaneRed HatUncontrolled Resource Consumption in promhttp7.5 HighbutaneRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighbutaneRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighbutaneRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalbutaneRed Hatx/crypto/ssh vulnerable to panic via malformed packets7.5 HighbutaneRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumbutaneRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighbutaneRed HatHoles in EndpointSlice Validation Enable Host Network Hijack2.7 LowbutaneRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumbutaneRed HatGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighbutaneRed HatIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...4.6 MediumbutaneRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumbutaneRed HatSession fixation vulnerability in Jenkins7.5 HighbutaneRed HatImproper permission checks allow canceling queue items and aborting builds in Jenkins4.3 MediumbutaneRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighbutaneRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumbutaneRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighbutaneRed HatValidating Admission Webhook does not observe some previous fields6.5 MediumbutaneRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighbutaneRed HatCross-Site Request Forgery in Jenkins Credentials Plugin6.1 MediumbutaneRed HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 MediumbutaneRed HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 MediumbutaneRed HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 MediumbutaneRed HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 MediumbutaneRed HatXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 HighbutaneRed HatDenial of service in gopkg.in/yaml.v25.5 MediumbutaneRed HatView name validation bypass in Jenkins4.3 MediumbutaneRed HatLack of type validation in agent related REST API in Jenkins4.3 MediumbutaneRed HatImproper Locking in github.com/containers/storage6.5 MediumbutaneRed HatIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items6.5 MediumbutaneRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumbutaneRed HatStored XSS vulnerability in Jenkins on new item page5.4 MediumbutaneRed HatReflected XSS vulnerability in Jenkins markup formatter preview6.1 MediumbutaneRed HatMissing permission check for paths with specific prefix in Jenkins5.3 MediumbutaneRed HatStored XSS vulnerability in Jenkins button labels5.4 MediumbutaneRed HatExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 MediumbutaneRed HatArbitrary file existence check in file fingerprints in Jenkins4.3 MediumbutaneRed HatPath traversal vulnerability in Jenkins agent names8.0 High- Show moreLoading…