udica vulnerabilities (Rocky Linux)
123 vulnerabilities.
udicaRocky LinuxBuildah: buildah: container escape via improper bind mount validation8.6 HighudicaRocky LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumudicaRocky Linuxjose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext4.9 MediumudicaRocky LinuxErrors returned from JSON marshaling may break template escaping in html/template5.4 MediumudicaRocky LinuxComments in display names are incorrectly handled in net/mail7.5 HighudicaRocky LinuxMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 MediumudicaRocky LinuxVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumudicaRocky LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighudicaRocky Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighudicaRocky LinuxDenial of service via chunk extensions in net/http5.3 MediumudicaRocky LinuxBefore Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel7.5 HighudicaRocky LinuxPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighudicaRocky LinuxMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighudicaRocky LinuxImproper handling of special tags within script contexts in html/template6.1 MediumudicaRocky LinuxImproper handling of HTML-like comments in script contexts in html/template6.1 MediumudicaRocky LinuxLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumudicaRocky LinuxImproper rendering of text nodes in golang.org/x/net/html6.1 MediumudicaRocky LinuxInsufficient sanitization of Host header in net/http6.5 MediumudicaRocky LinuxImproper handling of empty HTML attributes in html/template7.3 HighudicaRocky LinuxImproper handling of JavaScript whitespace in html/template9.8 CriticaludicaRocky LinuxImproper sanitization of CSS values in html/template7.3 HighudicaRocky LinuxBackticks not treated as string delimiters in html/template9.8 CriticaludicaRocky LinuxInfinite loop in parsing in go/scanner7.5 HighudicaRocky LinuxExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 HighudicaRocky LinuxExcessive memory allocation in net/http and net/textproto7.5 HighudicaRocky Linuxrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 MediumudicaRocky LinuxAppArmor bypass with symlinked /proc in runc6.1 MediumudicaRocky LinuxOpencontainers runc Incorrect Authorization vulnerability7.0 HighudicaRocky LinuxExcessive resource consumption in mime/multipart7.5 HighudicaRocky LinuxDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighudicaRocky LinuxPanic on large handshake records in crypto/tls7.5 HighudicaRocky LinuxIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 HighudicaRocky LinuxMemory exhaustion when compiling regular expressions in regexp/syntax7.5 HighudicaRocky LinuxUnbounded memory consumption when reading headers in archive/tar7.5 HighudicaRocky LinuxBuildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighudicaRocky LinuxPodman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1 HighudicaRocky Linuxgolang.org/x/net/http2 Denial of Service vulnerability7.5 HighudicaRocky LinuxExcessive resource consumption in gopkg.in/yaml.v27.5 HighudicaRocky LinuxExposure of client IP addresses in net/http6.5 MediumudicaRocky LinuxStack exhaustion when unmarshaling certain documents in encoding/xml7.5 HighudicaRocky LinuxStack exhaustion on crafted paths in path/filepath7.5 HighudicaRocky LinuxStack exhaustion when reading certain archives in compress/gzip7.5 HighudicaRocky LinuxStack exhaustion in Glob on certain paths in io/fs7.5 HighudicaRocky LinuxStack exhaustion from deeply nested XML documents in encoding/xml7.5 HighudicaRocky LinuxStack exhaustion due to deeply nested types in go/parser5.5 MediumudicaRocky LinuxImproper sanitization of Transfer-Encoding headers in net/http6.5 MediumudicaRocky LinuxNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 HighudicaRocky LinuxIncorrect Default Permissions in runc5.9 MediumudicaRocky LinuxPodman publishes a malicious image to public registries8.8 HighudicaRocky LinuxImportant: container-tools:rhel8 security, bug fix, and enhancement update7.5 High- Show moreLoading…