haproxy22 vulnerabilities (Red Hat)
70 vulnerabilities.
-
haproxy22Red Hat Podman: build context bind mount 7.4 High -
haproxy22Red Hat Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 6.5 Medium -
haproxy22Red Hat Buildah: buildah allows arbitrary directory mount 7.8 High -
haproxy22Red Hat Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 5.4 Medium -
haproxy22Red Hat Stack exhaustion in Parse in go/build/constraint 7.5 High -
haproxy22Red Hat Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
haproxy22Red Hat Stack exhaustion in all Parse functions in go/parser 4.3 Medium -
haproxy22Red Hat IBM Storage Ceph denial of service 2.6 Low -
haproxy22Red Hat IBM Spectrum Fusion HCI improper access control 6.5 Medium -
haproxy22Red Hat Cri-o: security regression of cve-2022-27652 4.8 Medium -
haproxy22Red Hat HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and... 7.2 High -
haproxy22Red Hat Podman Time-of-check Time-of-use (TOCTOU) Race Condition 6.8 Medium -
haproxy22Red Hat Information disclosure through error stack traces related to agents 5.3 Medium -
haproxy22Red Hat Incorrect Authorization in Jenkins Core 4.4 Medium -
haproxy22Red Hat Incorrect Authorization in Jenkins Core 7.0 High -
haproxy22Red Hat Cross-site Scripting vulnerability in Jenkins 9.6 Critical -
haproxy22Red Hat Unauthorized read of Custom Resources 6.5 Medium -
haproxy22Red Hat Excessive resource consumption in mime/multipart 7.5 High -
haproxy22Red Hat Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
haproxy22Red Hat Panic on large handshake records in crypto/tls 7.5 High -
haproxy22Red Hat Path traversal on Windows in path/filepath 7.5 High -
haproxy22Red Hat Werkzeug may allow high resource usage when parsing multipart form data with many fields 7.5 High -
haproxy22Red Hat HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are... 9.1 Critical -
haproxy22Red Hat github.com/openshift/apiserver-library-go Improper Input Validation vulnerability 6.3 Medium -
haproxy22Red Hat Sandbox bypass in Jenkins Script Security Plugin 8.8 High -
haproxy22Red Hat An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash... 6.5 Medium -
haproxy22Red Hat Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the... 7.4 High -
haproxy22Red Hat Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
haproxy22Red Hat Spring Security authorization rules can be bypassed via forward or include dispatcher types 9.8 Critical -
haproxy22Red Hat spring-security-oauth2-client vulnerable to Privilege Escalation 8.1 High -
haproxy22Red Hat Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) 5.1 Medium -
haproxy22Red Hat Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults 9.8 Critical -
haproxy22Red Hat Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
haproxy22Red Hat Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
haproxy22Red Hat Unbounded memory consumption when reading headers in archive/tar 7.5 High -
haproxy22Red Hat CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure 7.1 High -
haproxy22Red Hat Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification 7.1 High -
haproxy22Red Hat Failure to strip relative path components in net/url 7.5 High -
haproxy22Red Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
haproxy22Red Hat python-scciclient vulnerable to Man-in-the-middle (MITM) attacks 7.4 High -
haproxy22Red Hat Panic when decoding Float and Rat types in math/big 7.5 High -
haproxy22Red Hat Exposure of client IP addresses in net/http 6.5 Medium -
haproxy22Red Hat Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
haproxy22Red Hat Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
haproxy22Red Hat Incorrect Default Permissions in runc 5.9 Medium -
haproxy22Red Hat Ignition config accessible to unprivileged software on VMware 6.5 Medium -
haproxy22Red Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
haproxy22Red Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
haproxy22Red Hat golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
haproxy22Red Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High - Show olderLoading…