podman vulnerabilities (Rocky Linux)
116 vulnerabilities.
podmanRocky LinuxPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library5.4 MediumpodmanRocky LinuxStack exhaustion in Parse in go/build/constraint7.5 HighpodmanRocky LinuxStack exhaustion in Decoder.Decode in encoding/gob7.5 HighpodmanRocky LinuxStack exhaustion in all Parse functions in go/parser4.3 MediumpodmanRocky LinuxDenial of service due to improper 100-continue handling in net/http7.5 HighpodmanRocky LinuxPotential memory exhaustion attack due to sparse slice deserialization7.5 HighpodmanRocky Linuxgo-retryablehttp can leak basic auth credentials to log files6.0 MediumpodmanRocky LinuxImportant: container-tools:rhel8 security updateNo scorepodmanRocky LinuxMishandling of corrupt central directory record in archive/zip5.5 MediumpodmanRocky LinuxContainers/image: digest type does not guarantee valid type8.3 HighpodmanRocky LinuxMalformed DNS message can cause infinite loop in net5.9 MediumpodmanRocky LinuxGolang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads7.5 HighpodmanRocky LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighpodmanRocky LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumpodmanRocky Linuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumpodmanRocky LinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumpodmanRocky LinuxComments in display names are incorrectly handled in net/mail7.5 HighpodmanRocky LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumpodmanRocky LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumpodmanRocky LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighpodmanRocky LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumpodmanRocky LinuxInsufficient sanitization of Host header in net/http6.5 MediumpodmanRocky LinuxImproper handling of empty HTML attributes in html/template7.3 HighpodmanRocky LinuxImproper handling of JavaScript whitespace in html/template9.8 CriticalpodmanRocky LinuxImproper sanitization of CSS values in html/template7.3 HighpodmanRocky LinuxBackticks not treated as string delimiters in html/template9.8 CriticalpodmanRocky LinuxInfinite loop in parsing in go/scanner7.5 HighpodmanRocky LinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighpodmanRocky LinuxExcessive memory allocation in net/http and net/textproto7.5 HighpodmanRocky Linuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumpodmanRocky LinuxAppArmor bypass with symlinked /proc in runc6.1 MediumpodmanRocky LinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighpodmanRocky LinuxExcessive resource consumption in mime/multipart7.5 HighpodmanRocky LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighpodmanRocky LinuxPanic on large handshake records in crypto/tls7.5 HighpodmanRocky LinuxBuildah (as part of Podman) vulnerable to Link Following5.3 MediumpodmanRocky LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighpodmanRocky LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighpodmanRocky LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighpodmanRocky LinuxExposure of client IP addresses in net/http6.5 MediumpodmanRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighpodmanRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 HighpodmanRocky LinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighpodmanRocky LinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighpodmanRocky LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighpodmanRocky LinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumpodmanRocky LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumpodmanRocky LinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighpodmanRocky LinuxIncorrect Default Permissions in runc5.9 MediumpodmanRocky LinuxPodman publishes a malicious image to public registries8.8 High- Show moreLoading…