microshift-multus vulnerabilities (Red Hat)
17 vulnerabilities.
-
microshift-multusRed Hat Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
microshift-multusRed Hat Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
microshift-multusRed Hat Add recursion depth guard during decode in encoding/xml 7.5 High -
microshift-multusRed Hat Fix Javascript regexp context tracking in html/template 6.1 Medium -
microshift-multusRed Hat Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
microshift-multusRed Hat Enforce maximum recursion depth in encoding/asn1 7.5 High -
microshift-multusRed Hat Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
microshift-multusRed Hat Quadratic string concatenation in consumePhrase in net/mail 7.5 High -
microshift-multusRed Hat Quadratic string concatentation in consumeComment in net/mail 7.5 High -
microshift-multusRed Hat Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
microshift-multusRed Hat SpdyStream: DOS on CRI 8.7 High -
microshift-multusRed Hat gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
microshift-multusRed Hat Logrus is vulnerable to DoS when using Entry.Writer() 7.5 High -
microshift-multusRed Hat Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin 2.7 Low -
microshift-multusRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
microshift-multusRed Hat runc container breakout through process.cwd trickery and leaked fds 8.6 High -
microshift-multusRed Hat Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical