servicemesh-prometheus vulnerabilities (Red Hat)
47 vulnerabilities.
-
servicemesh-prometheusRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
servicemesh-prometheusRed Hat Ill-formed headers may lead to unexpected behavior in Istio 7.0 High -
servicemesh-prometheusRed Hat Trivial authentication bypass in Envoy 10.0 Critical -
servicemesh-prometheusRed Hat Reachable assertion in Envoy 7.5 High -
servicemesh-prometheusRed Hat Zip bomb vulnerability in Envoy 7.5 High -
servicemesh-prometheusRed Hat Segmentation fault leading to crash in Envoy 5.9 Medium -
servicemesh-prometheusRed Hat Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
servicemesh-prometheusRed Hat golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
servicemesh-prometheusRed Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
servicemesh-prometheusRed Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
servicemesh-prometheusRed Hat Path Traversal in Moment.js 7.5 High -
servicemesh-prometheusRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
servicemesh-prometheusRed Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
servicemesh-prometheusRed Hat Crash when tunneling TCP over HTTP in Envoy 7.5 High -
servicemesh-prometheusRed Hat Use-after-free in Envoy 6.1 Medium -
servicemesh-prometheusRed Hat Incorrect handling of internal redirects results in crash in Envoy 7.5 High -
servicemesh-prometheusRed Hat Incorrect configuration handling allows TLS session re-use without re-validation in Envoy 7.4 High -
servicemesh-prometheusRed Hat Crash when a cluster is deleted in Envoy 4.4 Medium -
servicemesh-prometheusRed Hat Null pointer dereference in envoy 7.5 High -
servicemesh-prometheusRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
servicemesh-prometheusRed Hat cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
servicemesh-prometheusRed Hat Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
servicemesh-prometheusRed Hat Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
servicemesh-prometheusRed Hat x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
servicemesh-prometheusRed Hat Inefficient Regular Expression Complexity in axios/axios 7.5 High -
servicemesh-prometheusRed Hat Excessive CPU utilization when closing HTTP/2 streams 5.8 Medium -
servicemesh-prometheusRed Hat Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http... 5.9 Medium -
servicemesh-prometheusRed Hat Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP... 7.5 High -
servicemesh-prometheusRed Hat denial of service in github.com/ulikunitz/xz 7.5 High -
servicemesh-prometheusRed Hat Improper Input Validation in GoGo Protobuf 8.6 High -
servicemesh-prometheusRed Hat In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language... 7.5 High -
servicemesh-prometheusRed Hat In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage... 7.5 High -
servicemesh-prometheusRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
servicemesh-prometheusRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium -
servicemesh-prometheusRed Hat Prototype Pollution in lodash 7.4 High -
servicemesh-prometheusRed Hat golang.org/x/text Infinite loop 7.5 High -
servicemesh-prometheusRed Hat gopkg.in/macaron.v1 Open Redirect vulnerability 6.1 Medium -
servicemesh-prometheusRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
servicemesh-prometheusRed Hat Improper Verification of Cryptographic Signature in golang.org/x/crypto 7.5 High -
servicemesh-prometheusRed Hat An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host... 7.5 High -
servicemesh-prometheusRed Hat An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such... 9.8 Critical -
servicemesh-prometheusRed Hat An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that... 9.8 Critical -
servicemesh-prometheusRed Hat Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack 7.5 High -
servicemesh-prometheusRed Hat In Envoy through 1.11.1, users may configure a route to match incoming path headers via the... 7.5 High -
servicemesh-prometheusRed Hat Istio ReDoS Vulnerability 7.5 High -
servicemesh-prometheusRed Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
servicemesh-prometheusRed Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High