libslirp vulnerabilities (Red Hat)
144 vulnerabilities.
libslirpRed HatCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 HighlibslirpRed HatBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighlibslirpRed HatPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighlibslirpRed HatFailure to strip relative path components in net/url7.5 HighlibslirpRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighlibslirpRed Hatpython-scciclient vulnerable to Man-in-the-middle (MITM) attacks7.4 HighlibslirpRed HatExcessive resource consumption in gopkg.in/yaml.v27.5 HighlibslirpRed HatPanic when decoding Float and Rat types in math/big7.5 HighlibslirpRed HatExposure of client IP addresses in net/http6.5 MediumlibslirpRed HatStack exhaustion when decoding certain messages in encoding/gob7.5 HighlibslirpRed HatStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighlibslirpRed HatStack exhaustion on crafted paths in path/filepath7.5 HighlibslirpRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighlibslirpRed HatStack exhaustion in Glob on certain paths in io/fs7.5 HighlibslirpRed HatStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighlibslirpRed HatStack exhaustion due to deeply nested types in go/parser5.5 MediumlibslirpRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumlibslirpRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 LowlibslirpRed HatNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighlibslirpRed HatIncorrect Default Permissions in runc5.9 MediumlibslirpRed HatIgnition config accessible to unprivileged software on VMware6.5 MediumlibslirpRed HatPodman publishes a malicious image to public registries8.8 HighlibslirpRed HatThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 HighlibslirpRed Hatencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 HighlibslirpRed HatImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 HighlibslirpRed HatPodman's default inheritable capabilities for linux container not empty7.5 HighlibslirpRed HatNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumlibslirpRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighlibslirpRed Hatregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 HighlibslirpRed HatUncontrolled Resource Consumption in promhttp7.5 HighlibslirpRed Hatcmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 HighlibslirpRed HatRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 HighlibslirpRed HatCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticallibslirpRed Hatx/crypto/ssh vulnerable to panic via malformed packets7.5 HighlibslirpRed HatExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumlibslirpRed HatClarify Content-Type handling in OCI spec3.0 LowlibslirpRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumlibslirpRed HatBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 MediumlibslirpRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumlibslirpRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighlibslirpRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighlibslirpRed HatDenial of service in gopkg.in/yaml.v25.5 MediumlibslirpRed HatImproper Locking in github.com/containers/storage6.5 MediumlibslirpRed HatPodman Origin Validation Error5.9 MediumlibslirpRed HatIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 HighlibslirpRed Hatgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 HighlibslirpRed HatInformation disclosure in podman5.3 MediumlibslirpRed HatImproper Authorization in github.com/containers/libpod7.0 HighlibslirpRed HatImportant: virt:rhel security update6.5 MediumlibslirpRed Hatgolang.org/x/text Infinite loop7.5 High- Show moreLoading…