crit vulnerabilities (Red Hat)
149 vulnerabilities.
critRed HatContainers/image: digest type does not guarantee valid type8.3 HighcritRed HatMalformed DNS message can cause infinite loop in net5.9 MediumcritRed HatGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighcritRed HatBuildah: buildah: container escape via improper bind mount validation8.6 HighcritRed HatGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumcritRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumcritRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumcritRed HatComments in display names are incorrectly handled in net/mail7.5 HighcritRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumcritRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumcritRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighcritRed HatBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumcritRed Hatrunc container breakout through process.cwd trickery and leaked fds8.6 HighcritRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumcritRed HatDenial of service via chunk extensions in net/http5.3 MediumcritRed HatBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighcritRed HatRequest body not stripped after redirect in urllib34.2 MediumcritRed HatAuthorization Header forwarded on redirect6.1 MediumcritRed HatCri-o: security regression of cve-2022-276524.8 MediumcritRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighcritRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighcritRed HatImproper handling of special tags within script contexts in html/template6.1 MediumcritRed HatImproper handling of HTML-like comments in script contexts in html/template6.1 MediumcritRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumcritRed HatImproper rendering of text nodes in golang.org/x/net/html6.1 MediumcritRed HatInsufficient sanitization of Host header in net/http6.5 MediumcritRed HatImproper handling of empty HTML attributes in html/template7.3 HighcritRed HatImproper handling of JavaScript whitespace in html/template9.8 CriticalcritRed HatImproper sanitization of CSS values in html/template7.3 HighcritRed HatBackticks not treated as string delimiters in html/template9.8 CriticalcritRed HatInfinite loop in parsing in go/scanner7.5 HighcritRed HatExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighcritRed HatExcessive memory allocation in net/http and net/textproto7.5 HighcritRed Hatrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumcritRed HatAppArmor bypass with symlinked /proc in runc6.1 MediumcritRed HatPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumcritRed HatOpencontainers runc Incorrect Authorization vulnerability7.0 HighcritRed HatUnauthorized read of Custom Resources6.5 MediumcritRed HatExcessive resource consumption in mime/multipart7.5 HighcritRed HatDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighcritRed HatPanic on large handshake records in crypto/tls7.5 HighcritRed Hatcontainerd supplementary groups are not set up properly5.3 MediumcritRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 HighcritRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumcritRed HatBuildah (as part of Podman) vulnerable to Link Following5.3 MediumcritRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumcritRed HatDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighcritRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighcritRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighcritRed HatUnbounded memory consumption when reading headers in archive/tar7.5 High- Show moreLoading…