netavark vulnerabilities (Rocky Linux)
77 vulnerabilities.
netavarkRocky LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighnetavarkRocky LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumnetavarkRocky Linuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumnetavarkRocky LinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumnetavarkRocky LinuxComments in display names are incorrectly handled in net/mail7.5 HighnetavarkRocky LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumnetavarkRocky LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumnetavarkRocky LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighnetavarkRocky LinuxBuildKit possible panic when incorrect parameters sent from frontend5.3 MediumnetavarkRocky LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumnetavarkRocky LinuxDenial of service via chunk extensions in net/http5.3 MediumnetavarkRocky LinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighnetavarkRocky LinuxRequest body not stripped after redirect in urllib34.2 MediumnetavarkRocky LinuxAuthorization Header forwarded on redirect6.1 MediumnetavarkRocky LinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighnetavarkRocky LinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighnetavarkRocky LinuxImproper handling of special tags within script contexts in html/template6.1 MediumnetavarkRocky LinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumnetavarkRocky LinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumnetavarkRocky LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighnetavarkRocky LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighnetavarkRocky LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighnetavarkRocky LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighnetavarkRocky LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighnetavarkRocky LinuxExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 MediumnetavarkRocky LinuxThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumnetavarkRocky LinuxGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 High