rhc vulnerabilities (Red Hat)
76 vulnerabilities.
-
rhcRed Hat gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
rhcRed Hat Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
rhcRed Hat Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
rhcRed Hat Fix Javascript regexp context tracking in html/template 6.1 Medium -
rhcRed Hat Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
rhcRed Hat Enforce maximum recursion depth in encoding/asn1 7.5 High -
rhcRed Hat Infinite loop on invalid input in golang.org/x/text 7.5 High -
rhcRed Hat Inefficient candidate hostname parsing in crypto/x509 6.5 Medium -
rhcRed Hat Crash when handling long CNAME response in net 7.5 High -
rhcRed Hat Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 8.2 High -
rhcRed Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
rhcRed Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
rhcRed Hat Inefficient policy validation in crypto/x509 7.5 High -
rhcRed Hat Unexpected work during chain building in crypto/x509 7.5 High -
rhcRed Hat gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
rhcRed Hat Incorrect parsing of IPv6 host literals in net/url 7.5 High -
rhcRed Hat Unexpected session resumption in crypto/tls 10.0 Critical -
rhcRed Hat Memory exhaustion in query parameter parsing in net/url 7.5 High -
rhcRed Hat Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
rhcRed Hat Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 4.0 Medium -
rhcRed Hat Sensitive headers incorrectly sent after cross-domain redirect in net/http 6.1 Medium -
rhcRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
rhcRed Hat Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
rhcRed Hat Excessive resource consumption in gopkg.in/yaml.v2 7.5 High -
rhcRed Hat The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a... 9.8 Critical -
rhcRed Hat XML external entity (XXE) vulnerability in Jenkins 7.5 High -
rhcRed Hat XML external entity (XXE) vulnerability in Jenkins 7.5 High -
rhcRed Hat mcollective has a default password set at install 9.8 Critical -
rhcRed Hat openshift-origin-node Improper Input Validation vulnerability 5.5 Medium -
rhcRed Hat Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical -
rhcRed Hat Jenkins Exposes Sensitive Information via API URL 4.3 Medium -
rhcRed Hat Jenkins affected by Open Redirect Vulnerability 7.4 High -
rhcRed Hat Missing permissions check in Jenkins Core 4.3 Medium -
rhcRed Hat Jenkins Exposes Sensitive Information from Job Configuration 6.5 Medium -
rhcRed Hat Exposure of Sensitive Information in Jenkins Core 4.3 Medium -
rhcRed Hat Incorrect Authorization in Jenkins Core 4.3 Medium -
rhcRed Hat Jenkins allows Remote Users to Inject Build Parameters 6.5 Medium -
rhcRed Hat Jenkins allows Deserialization of Untrusted Data via an XML File 8.8 High -
rhcRed Hat Exposure of Sensitive Information in Jenkins Core 9.8 Critical -
rhcRed Hat Exposure of Sensitive Information in Jenkins Core 5.3 Medium -
rhcRed Hat Jenkins has CRLF Injection Vulnerability in the CLI 6.1 Medium -
rhcRed Hat Jenkins allows Execution of Code by Opening a JRMP Listener 9.8 Critical -
rhcRed Hat Jenkins does not Verify Checksums for Plugin Files 7.5 High -
rhcRed Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack 8.8 High -
rhcRed Hat Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack 8.8 High -
rhcRed Hat Deserialization of Untrusted Data in Apache commons collections 9.8 Critical -
rhcRed Hat Improper Input Validation in Apache ActiveMQ 9.8 Critical -
rhcRed Hat Jenkins CLI Deserialization of Untrusted Data vulnerability 9.8 Critical -
rhcRed Hat Jenkins allows Cross-Site Scripting (XSS) 4.3 Medium -
rhcRed Hat Jenkins allows Bypass of Access Restrictions 7.5 High - Show olderLoading…