TI-2021-02215 CVE-2021-3121 · GHSA-c3h9-896r-86jm
An issue was discovered in GoGo Protobuf before 1.3.2.
Priority MEDIUM 43
An issue was discovered in GoGo Protobuf before 1.3.2.
RHSA-2021:4104
OpenShift Virtualization 4.9.0 Images security and bug fix update
Released 2021-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CNV 4.9 for RHEL 8 container-native-virtualization/bridge-marker, container-native-virtualization/cluster-network-addons-operator, container-native-virtualization/cnv-containernetworking-plugins +24
Fixes 6 records
TI-2021-13576 CVE-2021-34558 · GHSA-hqrm-74p3-w275
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of…
Priority LOW 39
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to c…
TI-2021-12746 CVE-2021-33198 · GHSA-q2pw-fq43-w78v
In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent…
Priority LOW 39
In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.
TI-2021-12743 CVE-2021-33195 · GHSA-xf7m-5vgf-jhv9
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not…
Priority LOW 38
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC…
TI-2021-11653 CVE-2021-31525 · GHSA-h86h-8ppg-mxmh
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a…
Priority LOW 33
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse.
TI-2021-12745 CVE-2021-33197 · GHSA-wqr7-cf9q-rvf7
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from…
Priority LOW 28
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.