49 matches found
CVE-2023-45288 affecting package kured for versions less than 1.15.0-2
CVE-2023-45288 affecting package kured for versions less than 1.15.0-2. A patched version of the package is available...
CVE-2023-45288 affecting package kured for versions less than 1.14.2-3
CVE-2023-45288 affecting package kured for versions less than 1.14.2-3. A patched version of the package is available...
AZL-38284 CVE-2023-45288 affecting package kured for versions less than 1.15.0-2
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-39445 CVE-2023-45288 affecting package kured for versions less than 1.14.2-3
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
CBL Mariner 2.0 Security Update: kured (CVE-2022-25891)
The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25891 advisory. - The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)
The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cri-o / keda / kube-vip-cloud-provider / kured / moby-engine / node-problem-detector (CVE-2022-21698)
The version of application-gateway-kubernetes-ingress / cri-o / keda / kube-vip-cloud-provider / kured / moby-engine / node-problem-detector installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21698...
CBL Mariner 2.0 Security Update: azcopy / cni / containernetworking-plugins / cri-o / git-lfs / golang / kata-containers (CVE-2022-29526)
The version of azcopy / cni / containernetworking-plugins / cri-o / git-lfs / golang / kata-containers installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-29526 advisory. - Go before 1.17.10 and 1.18....
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)
The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...
CBL Mariner 2.0 Security Update: kured (CVE-2022-27664)
The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27664 advisory. - In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an...
CBL Mariner 2.0 Security Update: kured (CVE-2022-28948)
The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28948 advisory. - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize...
CVE-2022-32149 affecting package kured for versions less than 1.13.2-1
CVE-2022-32149 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-27664 affecting package kured for versions less than 1.13.2-1
CVE-2022-27664 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-25891 affecting package kured for versions less than 1.13.2-1
CVE-2022-25891 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-28948 affecting package kured for versions less than 1.13.2-1
CVE-2022-28948 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-29526 affecting package kured for versions less than 1.13.2-1
CVE-2022-29526 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-21698 affecting package kured for versions less than 1.13.2-1
CVE-2022-21698 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-44716 affecting package kured for versions less than 1.13.2-1
CVE-2021-44716 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...