teleport vulnerabilities (openSUSE)
25 vulnerabilities.
-
teleportopenSUSE go-git: Maliciously crafted idx file can cause asymmetric memory consumption 5.0 Medium -
teleportopenSUSE Duplicate Advisory: pgproto3: Negative field length panics in DataRow.Decode 7.5 High -
teleportopenSUSE Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 7.0 High -
teleportopenSUSE OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking 7.0 High -
teleportopenSUSE rsa crate has potential panic on a prime being equal to 1 2.7 Low -
teleportopenSUSE quic-go HTTP/3 QPACK Header Expansion DoS 5.3 Medium -
teleportopenSUSE quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame 7.5 High -
teleportopenSUSE Teleport allows remote authentication bypass 9.8 Critical -
teleportopenSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
teleportopenSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
teleportopenSUSE Unexpected memory consumption during token parsing in golang.org/x/oauth2 7.5 High -
teleportopenSUSE Go JOSE's Parsing Vulnerable to Denial of Service 6.6 Medium -
teleportopenSUSE Non-linear parsing of case-insensitive content in golang.org/x/net/html 5.3 Medium -
teleportopenSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
teleportopenSUSE quic-go affected by an ICMP Packet Too Large Injection Attack on Linux 6.5 Medium -
teleportopenSUSE go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
teleportopenSUSE Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability 5.5 Medium -
teleportopenSUSE Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input 7.5 High -
teleportopenSUSE Cosign vulnerable to system-wide denial of service via malicious attachments 4.2 Medium -
teleportopenSUSE HTTP/2 CONTINUATION flood in net/http 7.5 High -
teleportopenSUSE electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only) 7.3 High -
teleportopenSUSE Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
teleportopenSUSE OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics 7.5 High -
teleportopenSUSE Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code 9.4 Critical -
teleportopenSUSE Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High