containernetworking-plugins vulnerabilities (Rocky Linux)
119 vulnerabilities.
containernetworking-pluginsRocky LinuxUncontrolled Resource Consumption in promhttp7.5 Highcontainernetworking-pluginsRocky LinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 Mediumcontainernetworking-pluginsRocky LinuxClarify Content-Type handling in OCI spec3.0 Lowcontainernetworking-pluginsRocky LinuxGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 Mediumcontainernetworking-pluginsRocky LinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 Mediumcontainernetworking-pluginsRocky LinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 Mediumcontainernetworking-pluginsRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 Highcontainernetworking-pluginsRocky Linuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 Highcontainernetworking-pluginsRocky LinuxImproper Locking in github.com/containers/storage6.5 Mediumcontainernetworking-pluginsRocky LinuxPodman Origin Validation Error5.9 Mediumcontainernetworking-pluginsRocky Linuxgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 Highcontainernetworking-pluginsRocky LinuxImproper Authorization in github.com/containers/libpod7.0 Highcontainernetworking-pluginsRocky LinuxPath Traversal in Buildah8.8 Highcontainernetworking-pluginsRocky LinuxIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 Mediumcontainernetworking-pluginsRocky Linuxtcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 Mediumcontainernetworking-pluginsRocky Linuxlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 Highcontainernetworking-pluginsRocky LinuxSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highcontainernetworking-pluginsRocky LinuxSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 High