Security
فارسی
All products

Service Telemetry Framework 1.3 for RHEL 8/stf/sg-core-rhel8

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
golang.org/x/text Infinite loopCVE-2020-14040 · GHSA-5RCV-M4M3-HFH7Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/jenkins-operator-container GoRed Hat Medium Fix reported
golang.org/x/net/http2 vulnerable to possible excessive memory growthCVE-2022-41717 · GHSA-XRJJ-MJ9H-534MVersion ranges need review. golang.org/x/net/http2golang.org/x/net GoRed Hat Medium Fix reported
Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 GoRed Hat Medium Fix reported
Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Panic when reading certain archives in archive/zipCVE-2021-33196 · GO-2021-0240 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic in ReverseProxy in net/http/httputilCVE-2021-36221 · GO-2021-0245 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic due to crafted inputs in archive/zipCVE-2021-39293 · GO-2022-0273 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Buffer overflow in WASM modules in misc/wasm and cmd/linkCVE-2021-38297 · GO-2022-0247 toolchainOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic on invalid symbol tables in debug/machoCVE-2021-41771 · GO-2021-0263 stdlibOpenShift Serverless/cli GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Uncontrolled memory consumption in math/bigCVE-2022-23772 · GO-2021-0317 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Incorrect access control in the go command in cmd/go/internal/modfetchCVE-2022-23773 · GO-2022-0318 toolchainMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Stack exhaustion when compiling deeply nested expressions in regexpCVE-2022-24921 · GO-2021-0347 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported