AZL-79016 CVE-2017-1000098 affecting package golang 1.25.7-1

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...

Design/Logic Flaw

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...

CVE-2017-1000098

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...

UBUNTU-CVE-2017-1000098

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...

CVE-2017-1000098

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...

CVE-2017-1000098

The CVE-2017-1000098 case concerns the Go net/http server’s Request.ParseMultipartForm: once the request body exceeds maxMemory, temporary files are written, enabling a crafted multipart request to exhaust file descriptors. Public documents confirm the vulnerability and its impact (file descripto...

CVE-2017-1000098

Removed by vendor...

Linux kernel timerfd Heap Buffer Overflow Privilege Escalation

The vulnerability of the timerfd.c component fs/timerfd.c in the Linux operating system is related to the parallel execution of operations on file descriptors. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

UBUNTU-CVE-2017-10661

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service list corruption or use-after-free via simultaneous file-descriptor operations that leverage improper mightcancel queueing...

CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

CVE-2017-11171

Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...

DEBIAN-CVE-2017-11171

Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...

CVE-2017-11171

Bad reference counting in the context of accepticeconnection in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data an invalid magic cookie. Each failed authentication...

PT-2018-12621

Name of the Vulnerable Software and Affected Versions libtirpc versions prior to 1.0.2-rc2 Description An infinite loop issue was discovered, which occurs when the server exhausts its file descriptors, causing it to enter an infinite loop and consume a large amount of CPU time. This results in a...

Denial Of Service (DoS)

httpolyglot within Kibana is vulnerable to denial of service DoS attacks. These attacks are possible when the application is configured for SSL client access. File descriptors are not cleaned up correctly after some requests, these descriptors accumulate over time and crash the process...

Kibana Denial of Service Vulnerability

Kibana is an open source data visualization plugin for Elasticsearch. A denial of service vulnerability exists in Kibana. When configured for SSL client access, file descriptors fail to clear after certain requests and can accumulate over time, causing the process to crash...

CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

Design/Logic Flaw

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...

CVE-2017-8452

Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes...