MiracleLinux 8 : container-tools:rhel8 (AXSA:2024-8553:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8553:01 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang-protobuf:...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.8)

The version of AOS installed on the remote host is prior to 6.10.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.8 advisory. - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.7)

The version of AOS installed on the remote host is prior to 7.0.1.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1.7 advisory. - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute...

Medium: containerd

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

opentelemetry:FuzzResponseUnmarshalJSON_pmetricotlp: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4570566351192064 Project: opentelemetry Fuzzing Engine: libFuzzer Fuzz Target: FuzzResponseUnmarshalJSONpmetricotlp Job Type: libfuzzerasanopentelemetry Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NU...

AZL-35580 CVE-2024-24786 affecting package kubernetes for versions less than 1.28.4-12

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...