slirp4netns vulnerabilities (Rocky Linux)
125 vulnerabilities.
slirp4netnsRocky LinuxBuildah: buildah: container escape via improper bind mount validation8.6 Highslirp4netnsRocky LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 Mediumslirp4netnsRocky Linuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 Mediumslirp4netnsRocky LinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 Mediumslirp4netnsRocky LinuxComments in display names are incorrectly handled in net/mail7.5 Highslirp4netnsRocky LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Mediumslirp4netnsRocky LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 Mediumslirp4netnsRocky LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 Highslirp4netnsRocky LinuxBuildKit possible panic when incorrect parameters sent from frontend5.3 Mediumslirp4netnsRocky Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 Highslirp4netnsRocky LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumslirp4netnsRocky LinuxDenial of service via chunk extensions in net/http5.3 Mediumslirp4netnsRocky LinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 Highslirp4netnsRocky LinuxRequest body not stripped after redirect in urllib34.2 Mediumslirp4netnsRocky LinuxAuthorization Header forwarded on redirect6.1 Mediumslirp4netnsRocky LinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 Highslirp4netnsRocky LinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 Highslirp4netnsRocky LinuxImproper handling of special tags within script contexts in html/template6.1 Mediumslirp4netnsRocky LinuxImproper handling of HTML-like comments in script contexts in html/template6.1 Mediumslirp4netnsRocky LinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumslirp4netnsRocky LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumslirp4netnsRocky LinuxInsufficient sanitization of Host header in net/http6.5 Mediumslirp4netnsRocky LinuxImproper handling of empty HTML attributes in html/template7.3 Highslirp4netnsRocky LinuxImproper handling of JavaScript whitespace in html/template9.8 Criticalslirp4netnsRocky LinuxImproper sanitization of CSS values in html/template7.3 Highslirp4netnsRocky LinuxBackticks not treated as string delimiters in html/template9.8 Criticalslirp4netnsRocky LinuxInfinite loop in parsing in go/scanner7.5 Highslirp4netnsRocky LinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 Highslirp4netnsRocky LinuxExcessive memory allocation in net/http and net/textproto7.5 Highslirp4netnsRocky Linuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 Mediumslirp4netnsRocky LinuxAppArmor bypass with symlinked /proc in runc6.1 Mediumslirp4netnsRocky LinuxOpencontainers runc Incorrect Authorization vulnerability7.0 Highslirp4netnsRocky LinuxExcessive resource consumption in mime/multipart7.5 Highslirp4netnsRocky LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highslirp4netnsRocky LinuxPanic on large handshake records in crypto/tls7.5 Highslirp4netnsRocky LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 Highslirp4netnsRocky LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highslirp4netnsRocky LinuxUnbounded memory consumption when reading headers in archive/tar7.5 Highslirp4netnsRocky LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 Highslirp4netnsRocky LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 Highslirp4netnsRocky Linuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 Highslirp4netnsRocky LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 Highslirp4netnsRocky LinuxExposure of client IP addresses in net/http6.5 Mediumslirp4netnsRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 Highslirp4netnsRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 Highslirp4netnsRocky LinuxStack exhaustion when reading certain archives in compress/gzip7.5 Highslirp4netnsRocky LinuxStack exhaustion in Glob on certain paths in io/fs7.5 Highslirp4netnsRocky LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 Highslirp4netnsRocky LinuxStack exhaustion due to deeply nested types in go/parser5.5 Mediumslirp4netnsRocky LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 Medium- Show moreLoading…