Security
فارسی
All products

Red Hat Openshift Container Storage 4/mcg

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52Version ranges need review. github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container GoRed Hat High No fix reported
go-retryablehttp can leak basic auth credentials to log filesCVE-2024-6104 · GHSA-V6V8-XJ6M-XWQHVersion ranges need review. github.com/hashicorp/go-retryablehttpOpenShift API for Data Protection/oadp/oadp-kubevirt-velero-plugin-rhel8 GoRed Hat Medium Fix reported
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)CVE-2024-28180 · GHSA-C5Q2-7R4C-MV6GVersion ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Kubernetes client-go vulnerable to Sensitive Information Leak via Log FileCVE-2020-8565 · GHSA-8CFG-VX93-JVXWVersion ranges need review. k8s.io/client-gok8s.io/kubernetes GoRed Hat Medium Fix reported
Authorization Bypass Through User-Controlled Key in go-restfulCVE-2022-1996 · GHSA-R48Q-9G5R-8Q2HVersion ranges need review. github.com/emicklei/go-restful/v2github.com/emicklei/go-restful/v3 GoRed Hat Critical Fix reported
Memory leaks in code encrypting and verifying RSA payloadsCVE-2024-1394 · GHSA-78HX-GP6G-7MJ6Version ranges need review. github.com/golang-fips/gogithub.com/golang-fips/openssl/v2 GoRed Hat High Fix reported
golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
golang.org/x/net vulnerable to Uncontrolled Resource ConsumptionCVE-2022-41723 · GHSA-VVPX-J8F3-3W6HVersion ranges need review. golang.org/x/netstdlib GoRed Hat High Fix reported
golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Infinite loop when decoding inputs in encoding/xmlCVE-2021-27918 · GO-2021-0234 stdlibDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel8 GoRed Hat Medium Fix reported
Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 GoRed Hat Medium Fix reported
Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Panic on certain certificates in crypto/tlsCVE-2021-34558 · GO-2021-0243 stdlibOpenShift Pipelines/golang GoRed Hat Medium Fix reported
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octetCVE-2021-29923 Migration Toolkit for Containers/rhmtc/openshift-migration-must-gather-rhel8Migration Toolkit for Containers/rhmtc/openshift-migration-registry-rhel8 Red Hat Medium No fix reported