crun-wasm vulnerabilities (Red Hat)
18 vulnerabilities.
-
crun-wasmRed Hat Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown 5.6 Medium -
crun-wasmRed Hat Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 5.6 Medium -
crun-wasmRed Hat crun follows rootfs /dev symlink while creating default devices 5.1 Medium -
crun-wasmRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
crun-wasmRed Hat Service monitor mac flow is not rate limited 5.3 Medium -
crun-wasmRed Hat Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
crun-wasmRed Hat Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
crun-wasmRed Hat Improper handling of special tags within script contexts in html/template 6.1 Medium -
crun-wasmRed Hat Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
crun-wasmRed Hat Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
crun-wasmRed Hat Improper rendering of text nodes in golang.org/x/net/html 6.1 Medium -
crun-wasmRed Hat goproxy Denial of Service vulnerability 7.5 High -
crun-wasmRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
crun-wasmRed Hat Withdrawn: Use after free in SciPy 9.8 Critical -
crun-wasmRed Hat Ocp & fips mode 7.0 High -
crun-wasmRed Hat Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin 6.5 Medium -
crun-wasmRed Hat Bypassing policies imposed by the ImagePolicyWebhook admission plugin 6.5 Medium -
crun-wasmRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High