ignition vulnerabilities (Red Hat)
126 vulnerabilities.
ignitionRed HatOcp & fips mode7.0 HighignitionRed HatBypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin6.5 MediumignitionRed HatBypassing policies imposed by the ImagePolicyWebhook admission plugin6.5 MediumignitionRed HatUnauthorized read of Custom Resources6.5 MediumignitionRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 HighignitionRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumignitionRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighignitionRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighignitionRed HatUnbounded memory consumption when reading headers in archive/tar7.5 HighignitionRed HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 HighignitionRed HatFailure to strip relative path components in net/url7.5 HighignitionRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighignitionRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 HighignitionRed HatPanic when decoding Float and Rat types in math/big7.5 HighignitionRed HatExposure of client IP addresses in net/http6.5 MediumignitionRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighignitionRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumignitionRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 LowignitionRed HatIncorrect Default Permissions in runc5.9 MediumignitionRed HatIgnition config accessible to unprivileged software on VMware6.5 MediumignitionRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighignitionRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighignitionRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighignitionRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighignitionRed HatUncontrolled Resource Consumption in promhttp7.5 HighignitionRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighignitionRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighignitionRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticalignitionRed Hatx/crypto/ssh vulnerable to panic via malformed packets7.5 HighignitionRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumignitionRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighignitionRed HatHoles in EndpointSlice Validation Enable Host Network Hijack2.7 LowignitionRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumignitionRed HatGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP...7.5 HighignitionRed HatIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...4.6 MediumignitionRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumignitionRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighignitionRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumignitionRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighignitionRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighignitionRed HatValidating Admission Webhook does not observe some previous fields6.5 MediumignitionRed Hatgolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 MediumignitionRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighignitionRed HatCross-Site Request Forgery in Jenkins Credentials Plugin6.1 MediumignitionRed HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 MediumignitionRed HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 MediumignitionRed HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 MediumignitionRed HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 MediumignitionRed HatXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 HighignitionRed HatDenial of service in gopkg.in/yaml.v25.5 Medium- Show moreLoading…