etcd vulnerabilities (openEuler)
27 vulnerabilities.
-
etcdopenEuler Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
etcdopenEuler Golang-fips: golang fips zeroed buffer 6.5 Medium -
etcdopenEuler Denial of service due to improper 100-continue handling in net/http 7.5 High -
etcdopenEuler HTTP/2 CONTINUATION flood in net/http 7.5 High -
etcdopenEuler Errors returned from JSON marshaling may break template escaping in html/template 5.4 Medium -
etcdopenEuler Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
etcdopenEuler Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
etcdopenEuler Denial of service via chunk extensions in net/http 5.3 Medium -
etcdopenEuler HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
etcdopenEuler etcd denial of service vulnerability 7.5 High -
etcdopenEuler Insufficient sanitization of Host header in net/http 6.5 Medium -
etcdopenEuler Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
etcdopenEuler etcd key name can be accessed via LeaseTimeToLive API 3.1 Low -
etcdopenEuler Backticks not treated as string delimiters in html/template 9.8 Critical -
etcdopenEuler Infinite loop in parsing in go/scanner 7.5 High -
etcdopenEuler Excessive resource consumption in net/http, net/textproto and mime/multipart 7.5 High -
etcdopenEuler Excessive memory allocation in net/http and net/textproto 7.5 High -
etcdopenEuler Etcd-io Improper Authentication vulnerability 9.8 Critical -
etcdopenEuler Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
etcdopenEuler Incorrect sanitization of forwarded query parameters in net/http/httputil 7.5 High -
etcdopenEuler Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
etcdopenEuler Excessive resource consumption in gopkg.in/yaml.v2 7.5 High -
etcdopenEuler Exposure of client IP addresses in net/http 6.5 Medium -
etcdopenEuler Stack exhaustion due to deeply nested types in go/parser 5.5 Medium -
etcdopenEuler The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
etcdopenEuler encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
etcdopenEuler regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High