libslirp vulnerabilities (Rocky Linux)
128 vulnerabilities.
libslirpRocky LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighlibslirpRocky LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumlibslirpRocky Linuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumlibslirpRocky LinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumlibslirpRocky LinuxComments in display names are incorrectly handled in net/mail7.5 HighlibslirpRocky LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumlibslirpRocky LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumlibslirpRocky LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighlibslirpRocky LinuxBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumlibslirpRocky Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighlibslirpRocky LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumlibslirpRocky LinuxDenial of service via chunk extensions in net/http5.3 MediumlibslirpRocky LinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighlibslirpRocky LinuxRequest body not stripped after redirect in urllib34.2 MediumlibslirpRocky LinuxAuthorization Header forwarded on redirect6.1 MediumlibslirpRocky LinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighlibslirpRocky LinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighlibslirpRocky LinuxImproper handling of special tags within script contexts in html/template6.1 MediumlibslirpRocky LinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumlibslirpRocky LinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumlibslirpRocky LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumlibslirpRocky LinuxInsufficient sanitization of Host header in net/http6.5 MediumlibslirpRocky LinuxImproper handling of empty HTML attributes in html/template7.3 HighlibslirpRocky LinuxImproper handling of JavaScript whitespace in html/template9.8 CriticallibslirpRocky LinuxImproper sanitization of CSS values in html/template7.3 HighlibslirpRocky LinuxBackticks not treated as string delimiters in html/template9.8 CriticallibslirpRocky LinuxInfinite loop in parsing in go/scanner7.5 HighlibslirpRocky LinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighlibslirpRocky LinuxExcessive memory allocation in net/http and net/textproto7.5 HighlibslirpRocky Linuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumlibslirpRocky LinuxAppArmor bypass with symlinked /proc in runc6.1 MediumlibslirpRocky LinuxPodman Time-of-check Time-of-use (TOCTOU) Race Condition6.8 MediumlibslirpRocky LinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighlibslirpRocky LinuxExcessive resource consumption in mime/multipart7.5 HighlibslirpRocky LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighlibslirpRocky LinuxPanic on large handshake records in crypto/tls7.5 HighlibslirpRocky Linuxcontainerd supplementary groups are not set up properly5.3 MediumlibslirpRocky LinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumlibslirpRocky LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighlibslirpRocky LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighlibslirpRocky LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighlibslirpRocky LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighlibslirpRocky LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighlibslirpRocky Linuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighlibslirpRocky LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighlibslirpRocky LinuxPanic when decoding Float and Rat types in math/big7.5 HighlibslirpRocky LinuxExposure of client IP addresses in net/http6.5 MediumlibslirpRocky LinuxStack exhaustion when decoding certain messages in encoding/gob7.5 HighlibslirpRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighlibslirpRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 High- Show moreLoading…