git-lfs vulnerabilities (openEuler)
45 vulnerabilities.
-
git-lfsopenEuler Limit handshake messages we are willing to accept post-handshake in crypto/tls 7.5 High -
git-lfsopenEuler Add recursion depth guard during decode in encoding/xml 7.5 High -
git-lfsopenEuler Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
git-lfsopenEuler Enforce maximum recursion depth in encoding/asn1 7.5 High -
git-lfsopenEuler Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage 7.5 High -
git-lfsopenEuler Arbitrary inputs are included in errors without any escaping in net/textproto 5.3 Medium -
git-lfsopenEuler Crash when handling long CNAME response in net 7.5 High -
git-lfsopenEuler Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 8.2 High -
git-lfsopenEuler TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix 6.4 Medium -
git-lfsopenEuler Inefficient policy validation in crypto/x509 7.5 High -
git-lfsopenEuler Unexpected work during chain building in crypto/x509 7.5 High -
git-lfsopenEuler Incorrect parsing of IPv6 host literals in net/url 7.5 High -
git-lfsopenEuler Incorrect enforcement of email constraints in crypto/x509 7.5 High -
git-lfsopenEuler Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net 7.5 High -
git-lfsopenEuler Unexpected session resumption in crypto/tls 10.0 Critical -
git-lfsopenEuler Memory exhaustion in query parameter parsing in net/url 7.5 High -
git-lfsopenEuler Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 6.5 Medium -
git-lfsopenEuler Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
git-lfsopenEuler Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
git-lfsopenEuler Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
git-lfsopenEuler Git LFS may write to arbitrary files via crafted symlinks 8.6 High -
git-lfsopenEuler Excessive CPU consumption in ParseAddress in net/mail 7.5 High -
git-lfsopenEuler Excessive CPU consumption in Reader.ReadResponse in net/textproto 5.3 Medium -
git-lfsopenEuler Quadratic complexity when parsing some invalid inputs in encoding/pem 7.5 High -
git-lfsopenEuler ALPN negotiation error contains attacker controlled information in crypto/tls 5.3 Medium -
git-lfsopenEuler Panic when validating certificates with DSA public keys in crypto/x509 7.5 High -
git-lfsopenEuler Quadratic complexity when checking name constraints in crypto/x509 7.5 High -
git-lfsopenEuler Lack of limit when parsing cookies can cause memory exhaustion in net/http 5.3 Medium -
git-lfsopenEuler Parsing DER payload can cause memory exhaustion in encoding/asn1 5.3 Medium -
git-lfsopenEuler Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
git-lfsopenEuler Insufficient validation of bracketed IPv6 hostnames in net/url 5.3 Medium -
git-lfsopenEuler CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http 5.4 Medium -
git-lfsopenEuler Incorrect results returned from Rows.Scan in database/sql 7.0 High -
git-lfsopenEuler Unexpected paths returned from LookPath in os/exec 6.5 Medium -
git-lfsopenEuler Walk/WalkDir in path/filepath susceptible to symlink race 3.7 Low -
git-lfsopenEuler Unexpected command execution in untrusted VCS repositories in cmd/go 8.6 High -
git-lfsopenEuler Git alllows arbitrary file writes via bundle-uri parameter injection 8.6 High -
git-lfsopenEuler Git allows arbitrary code execution through broken config quoting 8.1 High -
git-lfsopenEuler Git GUI can create and overwrite files for which the user has write permission 8.5 High -
git-lfsopenEuler Gitk allows arbitrary command execution 8.6 High -
git-lfsopenEuler Gitk can create and truncate files in the user's home directory 3.6 Low -
git-lfsopenEuler Sensitive headers not cleared on cross-origin redirect in net/http 6.8 Medium -
git-lfsopenEuler Usage of ExtKeyUsageAny disables policy validation in crypto/x509 7.5 High -
git-lfsopenEuler Panic when processing post-handshake message on QUIC connections in crypto/tls 7.5 High -
git-lfsopenEuler Memory exhaustion in QUIC connection handling in crypto/tls 7.5 High