CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)

The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cri-o / keda / kube-vip-cloud-provider / kured / moby-engine / node-problem-detector (CVE-2022-21698)

The version of application-gateway-kubernetes-ingress / cri-o / keda / kube-vip-cloud-provider / kured / moby-engine / node-problem-detector installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21698...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CBL Mariner 2.0 Security Update: azcopy / cni / containernetworking-plugins / cri-o / git-lfs / golang / kata-containers (CVE-2022-29526)

The version of azcopy / cni / containernetworking-plugins / cri-o / git-lfs / golang / kata-containers installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-29526 advisory. - Go before 1.17.10 and 1.18....

CBL Mariner 2.0 Security Update: kured (CVE-2022-27664)

The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27664 advisory. - In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an...

CBL Mariner 2.0 Security Update: kured (CVE-2022-28948)

The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28948 advisory. - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize...

CVE-2021-44716 affecting package kured for versions less than 1.13.2-1

CVE-2021-44716 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-28948 affecting package kured for versions less than 1.13.2-1

CVE-2022-28948 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package kured for versions less than 1.13.2-1

CVE-2022-21698 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27664 affecting package kured for versions less than 1.13.2-1

CVE-2022-27664 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package kured for versions less than 1.13.2-1

CVE-2022-29526 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32149 affecting package kured for versions less than 1.13.2-1

CVE-2022-32149 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-25891 affecting package kured for versions less than 1.13.2-1

CVE-2022-25891 affecting package kured for versions less than 1.13.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39325 affecting package kured for versions less than 1.9.1-14

CVE-2023-39325 affecting package kured for versions less than 1.9.1-14. A patched version of the package is available...

CVE-2023-44487 affecting package kured for versions less than 1.9.1-14

CVE-2023-44487 affecting package kured for versions less than 1.9.1-14. A patched version of the package is available...

AZL-31857 CVE-2023-39325 affecting package kured for versions less than 1.9.1-14

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-31319 CVE-2023-44487 affecting package kured for versions less than 1.9.1-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-31972 CVE-2022-32149 affecting package kured for versions less than 1.13.2-1

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-31963 CVE-2022-27664 affecting package kured for versions less than 1.13.2-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error...

AZL-31969 CVE-2022-25891 affecting package kured for versions less than 1.13.2-1

The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages...