microshift-release-info vulnerabilities (Red Hat)
41 vulnerabilities.
-
microshift-release-infoRed Hat Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
microshift-release-infoRed Hat Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
microshift-release-infoRed Hat Add recursion depth guard during decode in encoding/xml 7.5 High -
microshift-release-infoRed Hat Fix Javascript regexp context tracking in html/template 6.1 Medium -
microshift-release-infoRed Hat Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
microshift-release-infoRed Hat Enforce maximum recursion depth in encoding/asn1 7.5 High -
microshift-release-infoRed Hat Quadratic complexity in WordDecoder.DecodeHeader in mime 7.5 High -
microshift-release-infoRed Hat Quadratic string concatenation in consumePhrase in net/mail 7.5 High -
microshift-release-infoRed Hat Quadratic string concatentation in consumeComment in net/mail 7.5 High -
microshift-release-infoRed Hat Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
microshift-release-infoRed Hat SpdyStream: DOS on CRI 8.7 High -
microshift-release-infoRed Hat gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
microshift-release-infoRed Hat Logrus is vulnerable to DoS when using Entry.Writer() 7.5 High -
microshift-release-infoRed Hat Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin 2.7 Low -
microshift-release-infoRed Hat HTTP/2 CONTINUATION flood in net/http 7.5 High -
microshift-release-infoRed Hat Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 7.5 High -
microshift-release-infoRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
microshift-release-infoRed Hat runc container breakout through process.cwd trickery and leaked fds 8.6 High -
microshift-release-infoRed Hat Denial of service via chunk extensions in net/http 5.3 Medium -
microshift-release-infoRed Hat Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel 7.5 High -
microshift-release-infoRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
microshift-release-infoRed Hat Kube-apiserver: privesc 8.0 High -
microshift-release-infoRed Hat Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
microshift-release-infoRed Hat Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
microshift-release-infoRed Hat Improper handling of special tags within script contexts in html/template 6.1 Medium -
microshift-release-infoRed Hat Improper handling of HTML-like comments in script contexts in html/template 6.1 Medium -
microshift-release-infoRed Hat Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
microshift-release-infoRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
microshift-release-infoRed Hat Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin 6.5 Medium -
microshift-release-infoRed Hat Bypassing policies imposed by the ImagePolicyWebhook admission plugin 6.5 Medium -
microshift-release-infoRed Hat Improper handling of empty HTML attributes in html/template 7.3 High -
microshift-release-infoRed Hat Improper sanitization of CSS values in html/template 7.3 High -
microshift-release-infoRed Hat Backticks not treated as string delimiters in html/template 9.8 Critical -
microshift-release-infoRed Hat Infinite loop in parsing in go/scanner 7.5 High -
microshift-release-infoRed Hat Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
microshift-release-infoRed Hat Excessive memory allocation in net/http and net/textproto 7.5 High -
microshift-release-infoRed Hat Unauthorized read of Custom Resources 6.5 Medium -
microshift-release-infoRed Hat Panic on large handshake records in crypto/tls 7.5 High -
microshift-release-infoRed Hat github.com/openshift/apiserver-library-go Improper Input Validation vulnerability 6.3 Medium -
microshift-release-infoRed Hat Excessive memory growth in net/http and golang.org/x/net/http2 5.3 Medium -
microshift-release-infoRed Hat Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical