libslirp vulnerabilities (Red Hat)
144 vulnerabilities.
libslirpRed HatContainers/image: digest type does not guarantee valid type8.3 HighlibslirpRed HatMalformed DNS message can cause infinite loop in net5.9 MediumlibslirpRed HatGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighlibslirpRed HatBuildah: buildah: container escape via improper bind mount validation8.6 HighlibslirpRed HatGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumlibslirpRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumlibslirpRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumlibslirpRed HatComments in display names are incorrectly handled in net/mail7.5 HighlibslirpRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumlibslirpRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumlibslirpRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighlibslirpRed HatBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumlibslirpRed Hatrunc container breakout through process.cwd trickery and leaked fds8.6 HighlibslirpRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumlibslirpRed HatDenial of service via chunk extensions in net/http5.3 MediumlibslirpRed HatBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighlibslirpRed HatRequest body not stripped after redirect in urllib34.2 MediumlibslirpRed HatAuthorization Header forwarded on redirect6.1 MediumlibslirpRed HatCri-o: security regression of cve-2022-276524.8 MediumlibslirpRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighlibslirpRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighlibslirpRed HatImproper handling of special tags within script contexts in html/template6.1 MediumlibslirpRed HatImproper handling of HTML-like comments in script contexts in html/template6.1 MediumlibslirpRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumlibslirpRed HatImproper rendering of text nodes in golang.org/x/net/html6.1 MediumlibslirpRed HatInsufficient sanitization of Host header in net/http6.5 MediumlibslirpRed HatImproper handling of empty HTML attributes in html/template7.3 HighlibslirpRed HatImproper handling of JavaScript whitespace in html/template9.8 CriticallibslirpRed HatImproper sanitization of CSS values in html/template7.3 HighlibslirpRed HatBackticks not treated as string delimiters in html/template9.8 CriticallibslirpRed HatInfinite loop in parsing in go/scanner7.5 HighlibslirpRed HatExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighlibslirpRed HatExcessive memory allocation in net/http and net/textproto7.5 HighlibslirpRed Hatrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumlibslirpRed HatAppArmor bypass with symlinked /proc in runc6.1 MediumlibslirpRed HatPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumlibslirpRed HatOpencontainers runc Incorrect Authorization vulnerability7.0 HighlibslirpRed HatUnauthorized read of Custom Resources6.5 MediumlibslirpRed HatExcessive resource consumption in mime/multipart7.5 HighlibslirpRed HatDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighlibslirpRed HatPanic on large handshake records in crypto/tls7.5 HighlibslirpRed Hatcontainerd supplementary groups are not set up properly5.3 MediumlibslirpRed HatOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 HighlibslirpRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumlibslirpRed HatBuildah (as part of Podman) vulnerable to Link Following5.3 MediumlibslirpRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumlibslirpRed HatDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighlibslirpRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighlibslirpRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighlibslirpRed HatUnbounded memory consumption when reading headers in archive/tar7.5 High- Show moreLoading…