Security
فارسی
All products

OpenShift Service Mesh 2.0/servicemesh

Red Hat · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
x/crypto/ssh vulnerable to panic via malformed packetsCVE-2021-43565 · GHSA-GWC9-M7RH-J2WWVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/rhmtc/openshift-migration-velero-rhel8 GoRed Hat High Fix reported
Ill-formed headers may lead to unexpected behavior in IstioCVE-2022-31045 · GHSA-XWX5-5C9G-X68X istio.io/istioOpenShift Service Mesh 2.0/servicemesh GoRed Hat Medium Fix reported
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerabilityCVE-2020-29652 · GHSA-3VM4-22FP-5RFMVersion ranges need review. golang.org/x/cryptoOpenShift Service Mesh 2.0/3scale-istio-adapter-rhel8-container GoRed Hat High Fix reported
Uncontrolled Resource Consumption in promhttpCVE-2022-21698 · GHSA-CG3Q-J54F-5P7PVersion ranges need review. github.com/prometheus/client_golangCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat High Fix reported
golang.org/x/crypto/ssh Denial of service via crafted SignerCVE-2022-27191 · GHSA-8C26-WMH5-6G9VVersion ranges need review. golang.org/x/cryptoMigration Toolkit for Containers/cpma GoRed Hat High Fix reported
golang.org/x/net/html Infinite Loop vulnerabilityCVE-2021-33194 · GHSA-83G2-8M93-V3W7Version ranges need review. golang.org/x/netLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat High Fix reported
Improper Input Validation in GoGo ProtobufCVE-2021-3121 · GHSA-C3H9-896R-86JMVersion ranges need review. github.com/gogo/protobufOpenShift Service Mesh 2.0/servicemesh-cni GoRed Hat High Fix reported
golang.org/x/net/http/httpguts vulnerable to Uncontrolled RecursionCVE-2021-31525 · GHSA-H86H-8PPG-MXMHVersion ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
Path Traversal in MHolt ArchiverCVE-2019-10743 · GHSA-H74J-692G-48MQ github.com/mholt/archiverOpenShift Service Mesh 2.0/servicemesh GoRed Hat Medium Fix reported
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic on inputs with large exponents in math/bigCVE-2021-33198 · GO-2021-0242 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Infinite loop when decoding inputs in encoding/xmlCVE-2021-27918 · GO-2021-0234 stdlibDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel8 GoRed Hat Medium Fix reported
Improper sanitization when resolving values from DNS in netCVE-2021-33195 · GO-2021-0239 stdlibMigration Toolkit for Containers/rhmtc/openshift-migration-controller-rhel8 GoRed Hat Medium Fix reported
Attacker can drop certain headers in net/http/httputilCVE-2021-33197 · GO-2021-0241 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Panic when reading certain archives in archive/zipCVE-2021-33196 · GO-2021-0240 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic due to crafted inputs in archive/zipCVE-2021-39293 · GO-2022-0273 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Panic when opening certain archives in archive/zipCVE-2021-41772 · GO-2021-0264 stdlibOpenShift Serverless/cli GoRed Hat Medium Fix reported
Misdirected I/O in syscallCVE-2021-44717 · GO-2022-0289 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported