339 matches found
GHSA-69CH-W2M2-3VJP golang.org/x/text/language Denial of service via crafted Accept-Language header
The BCP 47 tag parser has quadratic time complexity due to inherent aspects of its design. Since the parser is, by design, exposed to untrusted user input, this can be leveraged to force a program to consume significant time parsing Accept-Language headers. The parser cannot be easily rewritten t...
AZL-33643 CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.6.2-2
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33628 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-39609 CVE-2022-32149 affecting package cri-o for versions less than 1.22.3-8
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33572 CVE-2022-32149 affecting package cf-cli for versions less than 8.4.0-21
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-44613 CVE-2022-32149 affecting package podman for versions less than 5.6.1-2
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33565 CVE-2022-32149 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-22
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-34903 CVE-2022-32149 affecting package kubevirt for versions less than 1.2.0-1
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-45162 CVE-2022-32149 affecting package containernetworking-plugins for versions less than 1.6.1-4
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-37089 CVE-2022-32149 affecting package cni for versions less than 1.1.2-3
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33605 CVE-2022-32149 affecting package kubevirt for versions less than 0.59.0-20
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
DEBIAN-CVE-2022-32149
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-66915 CVE-2022-32149 affecting package cni for versions less than 1.0.1-20
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-35285 CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.7.0-1
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
CVE-2022-32149
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33575 CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-43954 CVE-2022-32149 affecting package podman 4.1.1-26
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-35041 CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33589 CVE-2022-32149 affecting package influxdb for versions less than 2.6.1-17
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-45108 CVE-2022-32149 affecting package buildah for versions less than 1.41.4-2
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...