git-lfs vulnerabilities (Red Hat)
51 vulnerabilities.
-
git-lfsRed Hat Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
git-lfsRed Hat Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
git-lfsRed Hat Add recursion depth guard during decode in encoding/xml 7.5 High -
git-lfsRed Hat Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
git-lfsRed Hat Enforce maximum recursion depth in encoding/asn1 7.5 High -
git-lfsRed Hat Invoking Encrypted Client Hello privacy leak in crypto/tls 5.3 Medium -
git-lfsRed Hat Arbitrary inputs are included in errors without any escaping in net/textproto 5.3 Medium -
git-lfsRed Hat Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
git-lfsRed Hat Crash when handling long CNAME response in net 7.5 High -
git-lfsRed Hat Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 8.2 High -
git-lfsRed Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
git-lfsRed Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
git-lfsRed Hat Inefficient policy validation in crypto/x509 7.5 High -
git-lfsRed Hat Unexpected work during chain building in crypto/x509 7.5 High -
git-lfsRed Hat Incorrect parsing of IPv6 host literals in net/url 7.5 High -
git-lfsRed Hat Unexpected session resumption in crypto/tls 10.0 Critical -
git-lfsRed Hat Memory exhaustion in query parameter parsing in net/url 7.5 High -
git-lfsRed Hat Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
git-lfsRed Hat Git LFS may write to arbitrary files via crafted symlinks 8.6 High -
git-lfsRed Hat Unexpected paths returned from LookPath in os/exec 6.5 Medium -
git-lfsRed Hat Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
git-lfsRed Hat Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
git-lfsRed Hat Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 4.0 Medium -
git-lfsRed Hat Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 6.1 Medium -
git-lfsRed Hat Sensitive headers incorrectly sent after cross-domain redirect in net/http 6.1 Medium -
git-lfsRed Hat Git LFS permits exfiltration of credentials via crafted HTTP URLs 8.5 High -
git-lfsRed Hat Golang-fips: golang fips zeroed buffer 6.5 Medium -
git-lfsRed Hat Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
git-lfsRed Hat Denial of service due to improper 100-continue handling in net/http 7.5 High -
git-lfsRed Hat Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
git-lfsRed Hat Malformed DNS message can cause infinite loop in net 5.9 Medium -
git-lfsRed Hat HTTP/2 CONTINUATION flood in net/http 7.5 High -
git-lfsRed Hat Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http 4.3 Medium -
git-lfsRed Hat Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
git-lfsRed Hat Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
git-lfsRed Hat Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
git-lfsRed Hat Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
git-lfsRed Hat Insufficient sanitization of Host header in net/http 6.5 Medium -
git-lfsRed Hat Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
git-lfsRed Hat Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
git-lfsRed Hat Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
git-lfsRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
git-lfsRed Hat Panic when decoding Float and Rat types in math/big 7.5 High -
git-lfsRed Hat Exposure of client IP addresses in net/http 6.5 Medium -
git-lfsRed Hat Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
git-lfsRed Hat Stack exhaustion on crafted paths in path/filepath 7.5 High -
git-lfsRed Hat Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
git-lfsRed Hat Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
git-lfsRed Hat In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language... 7.5 High -
git-lfsRed Hat In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage... 7.5 High - Show olderLoading…