kiali vulnerabilities (Red Hat)
36 vulnerabilities.
-
kialiRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
kialiRed Hat Crash when tunneling TCP over HTTP in Envoy 7.5 High -
kialiRed Hat Use-after-free in Envoy 6.1 Medium -
kialiRed Hat Incorrect handling of internal redirects results in crash in Envoy 7.5 High -
kialiRed Hat Incorrect configuration handling allows TLS session re-use without re-validation in Envoy 7.4 High -
kialiRed Hat Crash when a cluster is deleted in Envoy 4.4 Medium -
kialiRed Hat Null pointer dereference in envoy 7.5 High -
kialiRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
kialiRed Hat x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
kialiRed Hat Inefficient Regular Expression Complexity in axios/axios 7.5 High -
kialiRed Hat Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http... 5.9 Medium -
kialiRed Hat Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP... 7.5 High -
kialiRed Hat denial of service in github.com/ulikunitz/xz 7.5 High -
kialiRed Hat Improper Input Validation in GoGo Protobuf 8.6 High -
kialiRed Hat In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language... 7.5 High -
kialiRed Hat In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage... 7.5 High -
kialiRed Hat Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. 7.5 High -
kialiRed Hat Prototype Pollution in lodash 7.4 High -
kialiRed Hat golang.org/x/text Infinite loop 7.5 High -
kialiRed Hat gopkg.in/macaron.v1 Open Redirect vulnerability 6.1 Medium -
kialiRed Hat Grafana world readable configuration files 5.5 Medium -
kialiRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
kialiRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
kialiRed Hat Insufficient Session Expiration in Kiali 7.0 High -
kialiRed Hat Prototype Pollution in minimist 5.6 Medium -
kialiRed Hat Improper Verification of Cryptographic Signature in golang.org/x/crypto 7.5 High -
kialiRed Hat Improper Validation and Sanitization in url-parse 5.3 Medium -
kialiRed Hat An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host... 7.5 High -
kialiRed Hat An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such... 9.8 Critical -
kialiRed Hat An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that... 9.8 Critical -
kialiRed Hat Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack 7.5 High -
kialiRed Hat In Envoy through 1.11.1, users may configure a route to match incoming path headers via the... 7.5 High -
kialiRed Hat Istio ReDoS Vulnerability 7.5 High -
kialiRed Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
kialiRed Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
kialiRed Hat Prototype Pollution in lodash 9.1 Critical