ose-gcp-gcr-image-credential-provider vulnerabilities (Red Hat)
36 vulnerabilities.
ose-gcp-gcr-image-credential-providerRed HatOpenshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification7.4 Highose-gcp-gcr-image-credential-providerRed HatDistrust compromised intermediate certificates in crypto/x5096.8 Mediumose-gcp-gcr-image-credential-providerRed HatCri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket7.8 Highose-gcp-gcr-image-credential-providerRed HatQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highose-gcp-gcr-image-credential-providerRed HatInefficient candidate hostname parsing in crypto/x5096.5 Mediumose-gcp-gcr-image-credential-providerRed HatQuadratic string concatenation in consumePhrase in net/mail7.5 Highose-gcp-gcr-image-credential-providerRed HatQuadratic string concatentation in consumeComment in net/mail7.5 Highose-gcp-gcr-image-credential-providerRed HatInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highose-gcp-gcr-image-credential-providerRed HatCrash when handling long CNAME response in net7.5 Highose-gcp-gcr-image-credential-providerRed HatUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highose-gcp-gcr-image-credential-providerRed HatUnexpected work during chain building in crypto/x5097.5 Highose-gcp-gcr-image-credential-providerRed HatgRPC-Go has an authorization bypass via missing leading slash in :path9.1 Criticalose-gcp-gcr-image-credential-providerRed HatIncorrect parsing of IPv6 host literals in net/url7.5 Highose-gcp-gcr-image-credential-providerRed HatUnexpected session resumption in crypto/tls10.0 Criticalose-gcp-gcr-image-credential-providerRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highose-gcp-gcr-image-credential-providerRed HatExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highose-gcp-gcr-image-credential-providerRed HatRequest smuggling due to acceptance of invalid chunked data in net/http9.1 Criticalose-gcp-gcr-image-credential-providerRed HatCri-o: cri-o path traversal in log handling functions allows arbitrary unmounting6.6 Mediumose-gcp-gcr-image-credential-providerRed HatPodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile8.6 Highose-gcp-gcr-image-credential-providerRed HatJinja has a sandbox breakout through indirect reference to format method5.4 Mediumose-gcp-gcr-image-credential-providerRed HatJinja has a sandbox breakout through malicious filenames5.4 Mediumose-gcp-gcr-image-credential-providerRed HatPodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)6.5 Mediumose-gcp-gcr-image-credential-providerRed HatBuildah: buildah allows arbitrary directory mount7.8 Highose-gcp-gcr-image-credential-providerRed HatPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 Mediumose-gcp-gcr-image-credential-providerRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalose-gcp-gcr-image-credential-providerRed HatContainers/image: digest type does not guarantee valid type8.3 Highose-gcp-gcr-image-credential-providerRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumose-gcp-gcr-image-credential-providerRed HatJinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter5.4 Mediumose-gcp-gcr-image-credential-providerRed HatPotential DoS via the Tudoor mechanism in eventlet and dnspython7.0 Highose-gcp-gcr-image-credential-providerRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 Mediumose-gcp-gcr-image-credential-providerRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 Mediumose-gcp-gcr-image-credential-providerRed HatComments in display names are incorrectly handled in net/mail7.5 Highose-gcp-gcr-image-credential-providerRed HatIncorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3 Mediumose-gcp-gcr-image-credential-providerRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumose-gcp-gcr-image-credential-providerRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumose-gcp-gcr-image-credential-providerRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 High