prometheus-promu vulnerabilities (Red Hat)
21 vulnerabilities.
-
prometheus-promuRed Hat Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file... 4.8 Medium -
prometheus-promuRed Hat golang.org/x/net/http2 allows uncontrolled memory consumption 7.5 High -
prometheus-promuRed Hat Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http... 5.9 Medium -
prometheus-promuRed Hat Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP... 7.5 High -
prometheus-promuRed Hat The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... 6.5 Medium -
prometheus-promuRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2). 7.5 High -
prometheus-promuRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary. 5.3 Medium -
prometheus-promuRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 allows injection. 7.3 High -
prometheus-promuRed Hat golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion 5.9 Medium -
prometheus-promuRed Hat In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... 6.5 Medium -
prometheus-promuRed Hat Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. 7.5 High -
prometheus-promuRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
prometheus-promuRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium -
prometheus-promuRed Hat Path Traversal in Buildah 8.8 High -
prometheus-promuRed Hat Kubernetes kube-apiserver allows access to custom resources via wrong scope 5.0 Medium -
prometheus-promuRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
prometheus-promuRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
prometheus-promuRed Hat The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker... 5.0 Medium -
prometheus-promuRed Hat A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin.... 6.5 Medium -
prometheus-promuRed Hat The OpenShift image import whitelist failed to enforce restrictions correctly when running... 4.3 Medium -
prometheus-promuRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Jenkins 5.3 Medium