89 matches found
AZL-76962 CVE-2025-47911 affecting package multus for versions less than 4.0.2-10
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
CLEANSTART-2026-EW68942 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-DD39330 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the multus-cni-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
Azure Linux 3.0 Security Update: multus (CVE-2020-28852)
The version of multus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28852 advisory. - In x/text in Go before v0.3.5, a slice bounds out of range panic occurs in language.ParseAcceptLanguage whil...
Azure Linux 3.0 Security Update: multus (CVE-2020-28851)
The version of multus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28851 advisory. - In x/text in Go 1.15.4, an index out of range panic occurs in language.ParseAcceptLanguage while parsing the...
Azure Linux 3.0 Security Update: cni / containernetworking-plugins / keda / multus (CVE-2021-38561)
The version of cni / containernetworking-plugins / keda / multus installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-38561 advisory. - golang.org/x/text/language in golang.org/x/text before 0.3.7 can...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-fips, skopeo-fips, gatus, newrelic-fluent-bit-output, nvidia-nsight-compute-13.2, kubernetes-csi-external-provisioner, kubecolor, neuvector-scanner-fips, azure-ipam, amazon-k8s-cni, guac, azuredisk-csi-fips, cfssl, apache-beam-python-3.11-sdk,...
CVE-2025-22872 affecting package multus for versions less than 4.0.2-8
CVE-2025-22872 affecting package multus for versions less than 4.0.2-8. A patched version of the package is available...
CVE-2025-22872 affecting package multus for versions less than 4.0.2-5
CVE-2025-22872 affecting package multus for versions less than 4.0.2-5. A patched version of the package is available...
AZL-60474 CVE-2025-22872 affecting package multus for versions less than 4.0.2-5
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
AZL-60568 CVE-2025-22872 affecting package multus for versions less than 4.0.2-8
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)
The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...
Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)
The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...
CVE-2024-45338 affecting package multus for versions less than 4.0.2-4
CVE-2024-45338 affecting package multus for versions less than 4.0.2-4. A patched version of the package is available...
CVE-2024-45338 affecting package multus for versions less than 4.0.2-7
CVE-2024-45338 affecting package multus for versions less than 4.0.2-7. A patched version of the package is available...
AZL-54564 CVE-2024-45338 affecting package multus for versions less than 4.0.2-7
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
AZL-54452 CVE-2024-45338 affecting package multus for versions less than 4.0.2-4
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
CVE-2023-39325 affecting package multus for versions less than 4.0.2-3
CVE-2023-39325 affecting package multus for versions less than 4.0.2-3. A patched version of the package is available...