CVE-2022-21698 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-2

CVE-2022-21698 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-2. A patched version of the package is available...

AZL-38158 CVE-2023-45288 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

CVE-2021-44716 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-19

CVE-2021-44716 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-19. A patched version of the package is available...

CVE-2022-21698 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-17

CVE-2022-21698 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-17. A patched version of the package is available...

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15. A patched version of the package is available...

AZL-34545 CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...