regclient vulnerabilities (openSUSE)
17 vulnerabilities.
-
regclientopenSUSE Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
regclientopenSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
regclientopenSUSE Unexpected session resumption in crypto/tls 10.0 Critical -
regclientopenSUSE Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 6.5 Medium -
regclientopenSUSE Excessive resource consumption when printing error string for host certificate validation in crypto/x509 7.5 High -
regclientopenSUSE Quadratic complexity when parsing some invalid inputs in encoding/pem 7.5 High -
regclientopenSUSE ALPN negotiation error contains attacker controlled information in crypto/tls 5.3 Medium -
regclientopenSUSE Panic when validating certificates with DSA public keys in crypto/x509 7.5 High -
regclientopenSUSE Quadratic complexity when checking name constraints in crypto/x509 7.5 High -
regclientopenSUSE Lack of limit when parsing cookies can cause memory exhaustion in net/http 5.3 Medium -
regclientopenSUSE Parsing DER payload can cause memory exhaustion in encoding/asn1 5.3 Medium -
regclientopenSUSE Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
regclientopenSUSE Insufficient validation of bracketed IPv6 hostnames in net/url 5.3 Medium -
regclientopenSUSE Out-of-bounds read in HTTP client no_proxy handling 5.9 Medium -
regclientopenSUSE Timing side-channel in SM2 algorithm on 64 bit ARM 5.9 Medium -
regclientopenSUSE Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
regclientopenSUSE github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives 5.3 Medium