git-lfs vulnerabilities (Rocky Linux)
35 vulnerabilities.
-
git-lfsRocky Linux Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
git-lfsRocky Linux Avoid quadratic complexity in resolvePath in net/url 5.9 Medium -
git-lfsRocky Linux Enforce maximum recursion depth in encoding/asn1 7.5 High -
git-lfsRocky Linux Crash when handling long CNAME response in net 7.5 High -
git-lfsRocky Linux Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
git-lfsRocky Linux TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
git-lfsRocky Linux Unexpected work during chain building in crypto/x509 7.5 High -
git-lfsRocky Linux Incorrect parsing of IPv6 host literals in net/url 7.5 High -
git-lfsRocky Linux Unexpected session resumption in crypto/tls 10.0 Critical -
git-lfsRocky Linux Memory exhaustion in query parameter parsing in net/url 7.5 High -
git-lfsRocky Linux Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
git-lfsRocky Linux Git LFS may write to arbitrary files via crafted symlinks 8.6 High -
git-lfsRocky Linux Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
git-lfsRocky Linux Git LFS permits exfiltration of credentials via crafted HTTP URLs 8.5 High -
git-lfsRocky Linux Golang-fips: golang fips zeroed buffer 6.5 Medium -
git-lfsRocky Linux Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
git-lfsRocky Linux Denial of service due to improper 100-continue handling in net/http 7.5 High -
git-lfsRocky Linux Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip 9.8 Critical -
git-lfsRocky Linux Malformed DNS message can cause infinite loop in net 5.9 Medium -
git-lfsRocky Linux HTTP/2 CONTINUATION flood in net/http 7.5 High -
git-lfsRocky Linux Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http 4.3 Medium -
git-lfsRocky Linux Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
git-lfsRocky Linux Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
git-lfsRocky Linux Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
git-lfsRocky Linux Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High -
git-lfsRocky Linux golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
git-lfsRocky Linux Panic when decoding Float and Rat types in math/big 7.5 High -
git-lfsRocky Linux Exposure of client IP addresses in net/http 6.5 Medium -
git-lfsRocky Linux Stack exhaustion when decoding certain messages in encoding/gob 7.5 High -
git-lfsRocky Linux Stack exhaustion on crafted paths in path/filepath 7.5 High -
git-lfsRocky Linux Stack exhaustion in Glob on certain paths in io/fs 7.5 High -
git-lfsRocky Linux Improper sanitization of Transfer-Encoding headers in net/http 6.5 Medium -
git-lfsRocky Linux In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language... 7.5 High -
git-lfsRocky Linux In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage... 7.5 High -
git-lfsRocky Linux Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical