kubevirt-virtctl vulnerabilities (Red Hat)
35 vulnerabilities.
-
kubevirt-virtctlRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
kubevirt-virtctlRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
kubevirt-virtctlRed Hat Improper handling of JavaScript whitespace in html/template 9.8 Critical -
kubevirt-virtctlRed Hat Excessive resource consumption in mime/multipart 7.5 High -
kubevirt-virtctlRed Hat Panic on large handshake records in crypto/tls 7.5 High -
kubevirt-virtctlRed Hat Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
kubevirt-virtctlRed Hat Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
kubevirt-virtctlRed Hat Failure to strip relative path components in net/url 7.5 High -
kubevirt-virtctlRed Hat golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
kubevirt-virtctlRed Hat Panic when decoding Float and Rat types in math/big 7.5 High -
kubevirt-virtctlRed Hat Exposure of client IP addresses in net/http 6.5 Medium -
kubevirt-virtctlRed Hat Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
kubevirt-virtctlRed Hat Stack exhaustion when unmarshaling certain documents in encoding/xml 7.5 High -
kubevirt-virtctlRed Hat Stack exhaustion on crafted paths in path/filepath 7.5 High -
kubevirt-virtctlRed Hat Stack exhaustion when reading certain archives in compress/gzip 7.5 High -
kubevirt-virtctlRed Hat Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
kubevirt-virtctlRed Hat Stack exhaustion from deeply nested XML documents in encoding/xml 7.5 High -
kubevirt-virtctlRed Hat Stack exhaustion due to deeply nested types in go/parser 5.5 Medium -
kubevirt-virtctlRed Hat Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
kubevirt-virtctlRed Hat Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
kubevirt-virtctlRed Hat golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
kubevirt-virtctlRed Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
kubevirt-virtctlRed Hat Uncontrolled Resource Consumption in promhttp 7.5 High -
kubevirt-virtctlRed Hat Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file... 4.8 Medium -
kubevirt-virtctlRed Hat golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
kubevirt-virtctlRed Hat golang.org/x/text/language Out-of-bounds Read vulnerability 7.5 High -
kubevirt-virtctlRed Hat Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP... 7.5 High -
kubevirt-virtctlRed Hat The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... 6.5 Medium -
kubevirt-virtctlRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2). 7.5 High -
kubevirt-virtctlRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary. 5.3 Medium -
kubevirt-virtctlRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 allows injection. 7.3 High -
kubevirt-virtctlRed Hat golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion 5.9 Medium -
kubevirt-virtctlRed Hat In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... 6.5 Medium -
kubevirt-virtctlRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
kubevirt-virtctlRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium