TI-2022-02669 CVE-2022-2879 · GHSA-fqpx-62jv-7r6r
Unbounded memory consumption when reading headers in archive/tar
Priority LOW 37
Reader.Read does not set a limit on the maximum size of file headers.
RHSA-2023:1174
OpenShift API for Data Protection (OADP) 1.1.2 security and bug fix update
Released 2023-03-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- 8Base-OADP-1.1 oadp/oadp-kubevirt-velero-plugin-rhel8, oadp/oadp-mustgather-rhel8, oadp/oadp-rhel8-operator +8
Fixes 4 records
TI-2022-20107 CVE-2022-41715 · GHSA-5wvm-rxcf-6cg8
Memory exhaustion when compiling regular expressions in regexp/syntax
Priority LOW 36
Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service.
TI-2022-02670 CVE-2022-2880 · GHSA-m3hq-grv6-h853
Incorrect sanitization of forwarded query parameters in net/http/httputil
Priority LOW 36
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http.
TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m
Excessive memory growth in net/http and golang.org/x/net/http2
Priority LOW 33
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.