warewulf4 vulnerabilities (openSUSE)
14 vulnerabilities.
-
warewulf4openSUSE gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 8.7 High -
warewulf4openSUSE gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion 6.3 Medium -
warewulf4openSUSE Infinite loop on invalid input in golang.org/x/text 7.5 High -
warewulf4openSUSE go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header 6.9 Medium -
warewulf4openSUSE go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware 6.9 Medium -
warewulf4openSUSE go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For 6.9 Medium -
warewulf4openSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
warewulf4openSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
warewulf4openSUSE Duplicate Advisory: chi has an open redirect vulnerability in the RedirectSlashes middleware 4.7 Medium -
warewulf4openSUSE github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives 5.3 Medium -
warewulf4openSUSE HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium -
warewulf4openSUSE Potential denial of service in golang.org/x/crypto 7.5 High -
warewulf4openSUSE Containers/image: digest type does not guarantee valid type 8.3 High -
warewulf4openSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical