criu vulnerabilities (Rocky Linux)
124 vulnerabilities.
criuRocky LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighcriuRocky LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumcriuRocky Linuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumcriuRocky LinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumcriuRocky LinuxComments in display names are incorrectly handled in net/mail7.5 HighcriuRocky LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumcriuRocky LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumcriuRocky LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighcriuRocky Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighcriuRocky LinuxDenial of service via chunk extensions in net/http5.3 MediumcriuRocky LinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighcriuRocky LinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighcriuRocky LinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighcriuRocky LinuxImproper handling of special tags within script contexts in html/template6.1 MediumcriuRocky LinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumcriuRocky LinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumcriuRocky LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumcriuRocky LinuxInsufficient sanitization of Host header in net/http6.5 MediumcriuRocky LinuxImproper handling of empty HTML attributes in html/template7.3 HighcriuRocky LinuxImproper handling of JavaScript whitespace in html/template9.8 CriticalcriuRocky LinuxImproper sanitization of CSS values in html/template7.3 HighcriuRocky LinuxBackticks not treated as string delimiters in html/template9.8 CriticalcriuRocky LinuxInfinite loop in parsing in go/scanner7.5 HighcriuRocky LinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighcriuRocky LinuxExcessive memory allocation in net/http and net/textproto7.5 HighcriuRocky Linuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumcriuRocky LinuxAppArmor bypass with symlinked /proc in runc6.1 MediumcriuRocky LinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumcriuRocky LinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighcriuRocky LinuxExcessive resource consumption in mime/multipart7.5 HighcriuRocky LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighcriuRocky LinuxPanic on large handshake records in crypto/tls7.5 HighcriuRocky LinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumcriuRocky LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighcriuRocky LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighcriuRocky LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighcriuRocky LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighcriuRocky LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighcriuRocky Linuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighcriuRocky LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighcriuRocky LinuxPanic when decoding Float and Rat types in math/big7.5 HighcriuRocky LinuxExposure of client IP addresses in net/http6.5 MediumcriuRocky LinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighcriuRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighcriuRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 HighcriuRocky LinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighcriuRocky LinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighcriuRocky LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighcriuRocky LinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumcriuRocky LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 Medium- Show moreLoading…