criu vulnerabilities (Red Hat)
149 vulnerabilities.
criuRed HatContainers/image: digest type does not guarantee valid type8.3 HighcriuRed HatMalformed DNS message can cause infinite loop in net5.9 MediumcriuRed HatGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighcriuRed HatBuildah: buildah: container escape via improper bind mount validation8.6 HighcriuRed HatGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumcriuRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumcriuRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumcriuRed HatComments in display names are incorrectly handled in net/mail7.5 HighcriuRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumcriuRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumcriuRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighcriuRed HatBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumcriuRed Hatrunc container breakout through process.cwd trickery and leaked fds8.6 HighcriuRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumcriuRed HatDenial of service via chunk extensions in net/http5.3 MediumcriuRed HatBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighcriuRed HatRequest body not stripped after redirect in urllib34.2 MediumcriuRed HatAuthorization Header forwarded on redirect6.1 MediumcriuRed HatCri-o: security regression of cve-2022-276524.8 MediumcriuRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighcriuRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighcriuRed HatImproper handling of special tags within script contexts in html/template6.1 MediumcriuRed HatImproper handling of HTML-like comments in script contexts in html/template6.1 MediumcriuRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumcriuRed HatImproper rendering of text nodes in golang.org/x/net/html6.1 MediumcriuRed HatInsufficient sanitization of Host header in net/http6.5 MediumcriuRed HatImproper handling of empty HTML attributes in html/template7.3 HighcriuRed HatImproper handling of JavaScript whitespace in html/template9.8 CriticalcriuRed HatImproper sanitization of CSS values in html/template7.3 HighcriuRed HatBackticks not treated as string delimiters in html/template9.8 CriticalcriuRed HatInfinite loop in parsing in go/scanner7.5 HighcriuRed HatExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighcriuRed HatExcessive memory allocation in net/http and net/textproto7.5 HighcriuRed Hatrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumcriuRed HatAppArmor bypass with symlinked /proc in runc6.1 MediumcriuRed HatPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumcriuRed HatOpencontainers runc Incorrect Authorization vulnerability7.0 HighcriuRed HatUnauthorized read of Custom Resources6.5 MediumcriuRed HatExcessive resource consumption in mime/multipart7.5 HighcriuRed HatDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighcriuRed HatPanic on large handshake records in crypto/tls7.5 HighcriuRed Hatcontainerd supplementary groups are not set up properly5.3 MediumcriuRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 HighcriuRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumcriuRed HatBuildah (as part of Podman) vulnerable to Link Following5.3 MediumcriuRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumcriuRed HatDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighcriuRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighcriuRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighcriuRed HatUnbounded memory consumption when reading headers in archive/tar7.5 High- Show moreLoading…