criu vulnerabilities (Rocky Linux)
124 vulnerabilities.
criuRocky LinuxSession tickets lack random ticket_age_add in crypto/tls3.1 LowcriuRocky LinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighcriuRocky LinuxIncorrect Default Permissions in runc5.9 MediumcriuRocky LinuxPodman publishes a malicious image to public registries8.8 HighcriuRocky LinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 HighcriuRocky LinuxPodman's default inheritable capabilities for linux container not empty7.5 HighcriuRocky LinuxNon-empty default inheritable capabilities for linux container in Buildah6.8 MediumcriuRocky Linuxgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 HighcriuRocky LinuxUncontrolled Resource Consumption in promhttp7.5 HighcriuRocky LinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumcriuRocky LinuxClarify Content-Type handling in OCI spec3.0 LowcriuRocky LinuxGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...5.9 MediumcriuRocky LinuxBuildah processes using chroot isolation may leak environment values to intermediate processes5.5 MediumcriuRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighcriuRocky Linuxmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighcriuRocky LinuxImproper Locking in github.com/containers/storage6.5 MediumcriuRocky LinuxPodman Origin Validation Error5.9 MediumcriuRocky Linuxgolang.org/x/crypto/ssh NULL Pointer Dereference vulnerability7.5 HighcriuRocky LinuxInformation disclosure in podman5.3 MediumcriuRocky LinuxImproper Authorization in github.com/containers/libpod7.0 HighcriuRocky LinuxA malicious container image can consume an unbounded amount of memory when being pulled to a...3.3 LowcriuRocky LinuxPath Traversal in Buildah8.8 HighcriuRocky LinuxPodman has Files or Directories Accessible to External Parties5.9 MediumcriuRocky Linuxopencontainers runc contains procfs race condition with a shared volume mount7.0 High