rclone vulnerabilities (openSUSE)
82 vulnerabilities.
rcloneopenSUSEInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 CriticalrcloneopenSUSEInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 HighrcloneopenSUSEInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 MediumrcloneopenSUSEInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 MediumrcloneopenSUSEgo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion6.5 MediumrcloneopenSUSEInfinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net7.5 HighrcloneopenSUSEOut-of-Bounds Write in Google Brotli Decoder9.2 CriticalrcloneopenSUSEgo-ntlmssp NTLM challenges can panic on malformed payloads5.3 MediumrcloneopenSUSEPanic when decoding large WEBP image on 32-bit platforms in golang.org/x/image7.5 HighrcloneopenSUSERClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution9.2 CriticalrcloneopenSUSERclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution9.2 CriticalrcloneopenSUSEOOM from malicious IFD offset in golang.org/x/image/tiff5.3 MediumrcloneopenSUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 CriticalrcloneopenSUSESending certain HTTP/2 frames can cause a server to panic in golang.org/x/net7.5 HighrcloneopenSUSEIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 LowrcloneopenSUSEUnexpected session resumption in crypto/tls10.0 CriticalrcloneopenSUSEUnbounded memory consumption in golang.org/x/crypto/ssh5.3 MediumrcloneopenSUSEjwt-go allows excessive memory allocation during header parsing7.5 HighrcloneopenSUSEHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net4.4 MediumrcloneopenSUSEPotential denial of service in golang.org/x/crypto7.5 HighrcloneopenSUSENon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumrcloneopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticalrcloneopenSUSERclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata5.4 MediumrcloneopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowrcloneopenSUSEHTTP/2 CONTINUATION flood in net/http7.5 HighrcloneopenSUSEInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighrcloneopenSUSEPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumrcloneopenSUSEHTTP request body disclosure in github.com/go-resty/resty/v25.9 MediumrcloneopenSUSEUse of Cryptographically Weak Pseudo-Random Number Generator in Rclone7.5 HighrcloneopenSUSEInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical