GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3-fips, falcoctl, kubeflow, mongodb-kubernetes-operator, opentelemetry-collector-contrib, external-secrets-operator-fips, overmind, nri-prometheus, container-object-storage-interface-fips, gitlab-operator-fips, kubernetes-event-exporter,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: kubebuilder, trillian, boring-registry, vault-k8s, gosu, helm, k9s, atlantis, kubernetes-csi-livenessprobe, cert-manager-webhook-pdns, prometheus-alertmanager, hcloud, wgcf, gomplate, croc, render-template, grpcurl, falcosidekick, cadvisor,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: falcoctl, k3d, rekor, aws-flb-firehose-fips, wire-go, actions-runner-controller-fips, prometheus-statsd-exporter-fips, aws-ebs-csi-driver, git-lfs, overmind, nri-prometheus, smarter-device-manager, cert-manager-webhook-pdns, kafkaexporter, snyk-cli, gosu,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: falcoctl, aws-flb-cloudwatch, overmind, git-lfs, nri-prometheus, kubernetes-event-exporter, metallb-fips, nri-couchbase, wait-for-port, thanos, velero-plugin-for-aws-fips, bank-vaults-fips, bazelisk, shfmt, kubernetes-csi-external-provisioner, nri-haproxy, trivy-fips...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

PT-2021-27737

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state involves the arrow::DefaultBackend,...

PT-2021-27736

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves components such as arrow::DefaultBackend,...

arrow:arrow-ipc-file-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6674891504484352 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

arrow:arrow-ipc-stream-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4757582821064704 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

Exposed Endpoints

github.com/kubernetes/ingress-nginx is uses publicly exposed endpoints. The prometheus metrics and healthz of the Kubernetes defaultbackend can be accessed by a remote attacker using a port-forward request to access the publicly accessible metrics...