All products

mirror registry for Red Hat OpenShift/mirror-registry-container

Red Hat · Package
23 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Large RSA keys can cause high CPU usage in crypto/tlsCVE-2023-29409 · GO-2023-1987 stdlibNode Maintenance Operator/workload-availability/node-maintenance-rhel8-operator GoRed Hat Medium Fix reported
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channelCVE-2023-45287 · GO-2023-2375 stdlibCryostat 2/cryostat-tech-preview/cryostat-rhel8-operator GoRed Hat Medium Fix reported
Memory exhaustion in QUIC connection handling in crypto/tlsCVE-2023-39322 · GO-2023-2045 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Verify panics on certificates with an unknown public key algorithm in crypto/x509CVE-2024-24783 · GO-2024-2598 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Panic on large handshake records in crypto/tlsCVE-2022-41724 · GO-2023-1570 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Malformed DNS message can cause infinite loop in netCVE-2024-24788 · GO-2024-2824 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Panic when processing post-handshake message on QUIC connections in crypto/tlsCVE-2023-39321 · GO-2023-2044 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Stack exhaustion on crafted paths in path/filepathCVE-2022-30632 · GO-2022-0522 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion in Glob on certain paths in io/fsCVE-2022-30630 · GO-2022-0527 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Panic when decoding Float and Rat types in math/bigCVE-2022-32189 · GO-2022-0537 stdlibCustom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8 GoRed Hat Low Fix reported
consul: Command injection through script checks optionCVE-2023-5332 Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler/custom-metrics-autoscaler-rhel8OpenShift Service Mesh 2/consul Red Hat High No fix reported
mirror-registry: Redis password stored in plain-textCVE-2024-3625 mirror registry for Red Hat OpenShift/mirror-registry-container Red Hat Medium No fix reported
mirror-registry: Database user and password stored in plain-textCVE-2024-3624 mirror registry for Red Hat OpenShift/mirror-registry-container Red Hat Medium No fix reported
mirror-registry: Default database secret key stored in plain-text on initial configuration fileCVE-2024-3623 mirror registry for Red Hat OpenShift/mirror-registry-container Red Hat High No fix reported