netavark vulnerabilities (Red Hat)
122 vulnerabilities.
netavarkRed HatUnbounded memory consumption when reading headers in archive/tar7.5 HighnetavarkRed HatBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighnetavarkRed HatPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighnetavarkRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighnetavarkRed HatExcessive resource consumption in gopkg.in/yaml.v27.5 HighnetavarkRed HatPanic when decoding Float and Rat types in math/big7.5 HighnetavarkRed HatExposure of client IP addresses in net/http6.5 MediumnetavarkRed HatStack exhaustion when decoding certain messages in encoding/gob7.5 HighnetavarkRed HatStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighnetavarkRed HatStack exhaustion on crafted paths in path/filepath7.5 HighnetavarkRed HatStack exhaustion when reading certain archives in compress/gzip7.5 HighnetavarkRed HatStack exhaustion in Glob on certain paths in io/fs7.5 HighnetavarkRed HatStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighnetavarkRed HatStack exhaustion due to deeply nested types in go/parser5.5 MediumnetavarkRed HatImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumnetavarkRed HatSession tickets lack random ticket_age_add in crypto/tls3.1 LownetavarkRed HatNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighnetavarkRed HatIncorrect Default Permissions in runc5.9 MediumnetavarkRed HatPodman publishes a malicious image to public registries8.8 HighnetavarkRed HatImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 HighnetavarkRed HatPodman's default inheritable capabilities for linux container not empty7.5 HighnetavarkRed HatNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumnetavarkRed Hatgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighnetavarkRed HatUncontrolled Resource Consumption in promhttp7.5 HighnetavarkRed HatExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumnetavarkRed HatClarify Content-Type handling in OCI spec3.0 LownetavarkRed HatGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumnetavarkRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumnetavarkRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighnetavarkRed HatIn x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage...7.5 High