netavark vulnerabilities (Red Hat)
122 vulnerabilities.
netavarkRed HatDenial of service due to improper 100-continue handling in net/http7.5 HighnetavarkRed HatPotential memory exhaustion attack due to sparse slice deserialization7.5 HighnetavarkRed Hatgo-retryablehttp can leak basic auth credentials to log files6.0 MediumnetavarkRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 MediumnetavarkRed HatMishandling of corrupt central directory record in archive/zip5.5 MediumnetavarkRed HatContainers/image: digest type does not guarantee valid type8.3 HighnetavarkRed HatMalformed DNS message can cause infinite loop in net5.9 MediumnetavarkRed HatGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighnetavarkRed HatBuildah: buildah: container escape via improper bind mount validation8.6 HighnetavarkRed HatGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumnetavarkRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumnetavarkRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumnetavarkRed HatComments in display names are incorrectly handled in net/mail7.5 HighnetavarkRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumnetavarkRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumnetavarkRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighnetavarkRed HatBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumnetavarkRed Hatrunc container breakout through process.cwd trickery and leaked fds8.6 HighnetavarkRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumnetavarkRed HatDenial of service via chunk extensions in net/http5.3 MediumnetavarkRed HatBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighnetavarkRed HatRequest body not stripped after redirect in urllib34.2 MediumnetavarkRed HatAuthorization Header forwarded on redirect6.1 MediumnetavarkRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighnetavarkRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighnetavarkRed HatImproper handling of special tags within script contexts in html/template6.1 MediumnetavarkRed HatImproper handling of HTML-like comments in script contexts in html/template6.1 MediumnetavarkRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumnetavarkRed HatImproper rendering of text nodes in golang.org/x/net/html6.1 MediumnetavarkRed HatInsufficient sanitization of Host header in net/http6.5 MediumnetavarkRed HatImproper handling of empty HTML attributes in html/template7.3 HighnetavarkRed HatImproper handling of JavaScript whitespace in html/template9.8 CriticalnetavarkRed HatImproper sanitization of CSS values in html/template7.3 HighnetavarkRed HatBackticks not treated as string delimiters in html/template9.8 CriticalnetavarkRed HatInfinite loop in parsing in go/scanner7.5 HighnetavarkRed HatExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighnetavarkRed HatExcessive memory allocation in net/http and net/textproto7.5 HighnetavarkRed Hatrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumnetavarkRed HatAppArmor bypass with symlinked /proc in runc6.1 MediumnetavarkRed HatPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumnetavarkRed HatOpencontainers runc Incorrect Authorization vulnerability7.0 HighnetavarkRed HatExcessive resource consumption in mime/multipart7.5 HighnetavarkRed HatDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighnetavarkRed HatPanic on large handshake records in crypto/tls7.5 HighnetavarkRed Hatcontainerd supplementary groups are not set up properly5.3 MediumnetavarkRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumnetavarkRed HatBuildah (as part of Podman) vulnerable to Link Following5.3 MediumnetavarkRed HatDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighnetavarkRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighnetavarkRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 High- Show moreLoading…