1666 matches found
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
PT-2024-25662 · Unknown · O-Ran E2T I-Release
Name of the Vulnerable Software and Affected Versions: O-RAN E2T I-Release affected versions not specified Description: The issue concerns the O-RAN E2T I-Release Prometheus metric Increment function, which can crash in sctpThread.cpp. This crash occurs when the Increment function is called for...
CVE-2024-34046
The CVE-2024-34046 entry describes a crash in the O-RAN E2T I-Release Prometheus metric Increment function, triggered when Increment() is called on message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment() in sctpThread.cpp. Affected c...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
Fedora 40 : golang-github-prometheus-node-exporter (2023-654e0ddfd8)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-654e0ddfd8 advisory. Automatic update for golang-github-prometheus-node-exporter-1.6.1-1.fc40. Changelog Thu Nov 9 2023 Mikel Olasagasti Uranga - 1.6.1-1 - Update to 1.6...
RHEL 8 : Release of OpenShift Serverless Client kn 1.24.0 (Important) (RHSA-2022:6042)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6042 advisory. Red Hat OpenShift Serverless Client kn 1.24.0 provides a CLI to interact with Red Hat OpenShift Serverless 1.24.0. The kn CLI is delivered a...
RHEL 7 / 8 : OpenShift Virtualization 4.10.1 RPMs (RHSA-2022:4667)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4667 advisory. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...
CVE-2023-45142 affecting package prometheus for versions less than 2.45.4-1
CVE-2023-45142 affecting package prometheus for versions less than 2.45.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-41717 affecting package prometheus for versions less than 2.45.4-1
CVE-2022-41717 affecting package prometheus for versions less than 2.45.4-1. An upgraded version of the package is available that resolves this issue...
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: nats-server, rclone, crossplane-provider-aws-cloudwatchlogs, grafana-agent-operator, pulumi-kubernetes-operator, chezmoi, terraform-provider-azurerm, nri-couchbase, prometheus-alertmanager, trust-manager, grpc-health-probe, kubevela, ytt, multus-cni, render-template,...
AZL-38473 CVE-2023-45288 affecting package prometheus-node-exporter for versions less than 1.7.0-2
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-38761 CVE-2023-45288 affecting package prometheus-adapter for versions less than 0.12.0-1
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-39678 CVE-2023-45288 affecting package prometheus for versions less than 2.45.4-4
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-50336 CVE-2023-45288 affecting package prometheus for versions less than 2.37.9-2
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
Fedora: Security Advisory (FEDORA-2024-9231308a4f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for prometheus-podman-exporter (FEDORA-2024-45f0a1df95)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-a8a4ce2864)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: prometheus-podman-exporter-1.11.0-1.fc38
Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...