ignition vulnerabilities (openSUSE)
10 vulnerabilities.
-
ignitionopenSUSE Infinite loop on invalid input in golang.org/x/text 7.5 High -
ignitionopenSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
ignitionopenSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
ignitionopenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
ignitionopenSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
ignitionopenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
ignitionopenSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
ignitionopenSUSE gopkg.in/yaml.v3 Denial of Service 7.5 High -
ignitionopenSUSE Ignition config accessible to unprivileged software on VMware 6.5 Medium -
ignitionopenSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical