udica vulnerabilities (Red Hat)
136 vulnerabilities.
udicaRed HatContainers/image: digest type does not guarantee valid type8.3 HighudicaRed HatMalformed DNS message can cause infinite loop in net5.9 MediumudicaRed HatGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighudicaRed HatBuildah: buildah: container escape via improper bind mount validation8.6 HighudicaRed HatGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumudicaRed Hatjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumudicaRed HatErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumudicaRed HatComments in display names are incorrectly handled in net/mail7.5 HighudicaRed HatMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumudicaRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumudicaRed HatInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighudicaRed HatBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumudicaRed Hatrunc container breakout through process.cwd trickery and leaked fds8.6 HighudicaRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumudicaRed HatDenial of service via chunk extensions in net/http5.3 MediumudicaRed HatBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighudicaRed HatRequest body not stripped after redirect in urllib34.2 MediumudicaRed HatAuthorization Header forwarded on redirect6.1 MediumudicaRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighudicaRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighudicaRed HatImproper handling of special tags within script contexts in html/template6.1 MediumudicaRed HatImproper handling of HTML-like comments in script contexts in html/template6.1 MediumudicaRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumudicaRed HatImproper rendering of text nodes in golang.org/x/net/html6.1 MediumudicaRed HatInsufficient sanitization of Host header in net/http6.5 MediumudicaRed HatImproper handling of empty HTML attributes in html/template7.3 HighudicaRed HatImproper handling of JavaScript whitespace in html/template9.8 CriticaludicaRed HatImproper sanitization of CSS values in html/template7.3 HighudicaRed HatBackticks not treated as string delimiters in html/template9.8 CriticaludicaRed HatInfinite loop in parsing in go/scanner7.5 HighudicaRed HatExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighudicaRed HatExcessive memory allocation in net/http and net/textproto7.5 HighudicaRed Hatrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumudicaRed HatAppArmor bypass with symlinked /proc in runc6.1 MediumudicaRed HatPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumudicaRed HatOpencontainers runc Incorrect Authorization vulnerability7.0 HighudicaRed HatExcessive resource consumption in mime/multipart7.5 HighudicaRed HatDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighudicaRed HatPanic on large handshake records in crypto/tls7.5 HighudicaRed Hatcontainerd supplementary groups are not set up properly5.3 MediumudicaRed HatExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumudicaRed HatBuildah (as part of Podman) vulnerable to Link Following5.3 MediumudicaRed HatDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighudicaRed HatIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighudicaRed HatMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighudicaRed HatUnbounded memory consumption when reading headers in archive/tar7.5 HighudicaRed HatBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighudicaRed HatPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighudicaRed Hatgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighudicaRed HatExcessive resource consumption in gopkg.in/yaml.v27.5 High- Show moreLoading…