Security
فارسی
All products

Service Telemetry Framework 1.4 for RHEL 8/stf/sg-core-rhel8

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Memory exhaustion when compiling regular expressions in regexp/syntaxCVE-2022-41715 · GO-2022-1039 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Failure to strip relative path components in net/urlCVE-2022-32190 · GO-2022-0988 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Excessive memory allocation in net/http and net/textprotoCVE-2023-24534 · GO-2023-1704 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Backticks not treated as string delimiters in html/templateCVE-2023-24538 · GO-2023-1703 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Excessive resource consumption in net/http, net/textproto and mime/multipartCVE-2023-24536 · GO-2023-1705 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Infinite loop in parsing in go/scannerCVE-2023-24537 · GO-2023-1702 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/sys/unix has Incorrect privilege reporting in syscallCVE-2022-29526 · GHSA-P782-XGP4-8HR8Version ranges need review. golang.org/x/sysstdlib GoRed Hat Medium Fix reported
Excessive resource consumption in mime/multipartCVE-2022-41725 · GO-2023-1569 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
Panic on large handshake records in crypto/tlsCVE-2022-41724 · GO-2023-1570 stdlibNode HealthCheck Operator/workload-availability/node-healthcheck-rhel8-operator GoRed Hat Medium Fix reported
golang.org/x/net/http2 Denial of Service vulnerabilityCVE-2022-27664 · GHSA-69CG-P879-7622Version ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat High Fix reported
Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318 toolchainMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
Stack exhaustion on crafted paths in path/filepathCVE-2022-30632 · GO-2022-0522 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Improper sanitization of Transfer-Encoding headers in net/httpCVE-2022-1705 · GO-2022-0525 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported
Stack exhaustion in Glob on certain paths in io/fsCVE-2022-30630 · GO-2022-0527 stdlibMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-controller-rhel9 GoRed Hat Medium Fix reported