kubevirt-1.6 vulnerabilities (SUSE)
22 vulnerabilities.
kubevirt-1.6SUSESecurity update for kubevirt-1.6No scorekubevirt-1.6SUSEKubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host8.8 Highkubevirt-1.6SUSEInfinite loop on invalid input in golang.org/x/text7.5 Highkubevirt-1.6SUSEParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 Highkubevirt-1.6SUSEKubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption7.3 Highkubevirt-1.6SUSEKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read7.7 Highkubevirt-1.6SUSEKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability9.9 Criticalkubevirt-1.6SUSEInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumkubevirt-1.6SUSEInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumkubevirt-1.6SUSEInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumkubevirt-1.6SUSEInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumkubevirt-1.6SUSEInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumkubevirt-1.6SUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 Highkubevirt-1.6SUSESpdyStream: DOS on CRI8.7 Highkubevirt-1.6SUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 Criticalkubevirt-1.6SUSEKubevirt: kubevirt: vm administration denial of service via guest agent6.4 Mediumkubevirt-1.6SUSEUnbounded memory consumption in golang.org/x/crypto/ssh5.3 Mediumkubevirt-1.6SUSEMalformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent5.3 Mediumkubevirt-1.6SUSEPotential denial of service in golang.org/x/crypto/ssh/agent7.5 Highkubevirt-1.6SUSEInfinite parsing loop in golang.org/x/net5.3 Mediumkubevirt-1.6SUSEQuadratic parsing complexity in golang.org/x/net/html5.3 Mediumkubevirt-1.6SUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical