Количество 86
Количество 86
CVE-2024-3727
A flaw was found in the github.com/containers/image library. This flaw ...
CVE-2024-24791
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.
CVE-2024-24791
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.
CVE-2024-24791
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.
CVE-2024-24791
Denial of service due to improper 100-continue handling in net/http
CVE-2024-24791
The net/http HTTP/1.1 client mishandled the case where a server respon ...
SUSE-SU-2024:2548-1
Security update for podman
SUSE-SU-2024:2383-1
Security update for skopeo
SUSE-SU-2024:1989-1
Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer
SUSE-SU-2024:1988-1
Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer
SUSE-SU-2024:1838-1
Security update for warewulf4
ROS-20240729-16
Уязвимость cri-o
ROS-20240719-01
Уязвимость podman
ROS-20240711-04
Уязвимость skopeo
ROS-20240711-02
Уязвимость buildah
GHSA-6wvf-f2vw-3425
github.com/containers/image allows unexpected authenticated registry accesses
BDU:2024-05780
Уязвимость библиотеки github.com/containers/image, связанная с неправильной проверкой значения целостности, позволяющая нарушителю вызвать отказ в обслуживании, выполнить атаку обхода локального пути или оказать иное воздействие
SUSE-SU-2024:2309-1
Security update for go1.22
SUSE-SU-2024:2308-1
Security update for go1.21
SUSE-SU-2024:2295-1
Security update for go1.22
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2024-3727 A flaw was found in the github.com/containers/image library. This flaw ... | CVSS3: 8.3 | 1% Низкий | больше 1 года назад |
 | CVE-2024-24791 The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2024-24791 The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail. | CVSS3: 5.9 | 1% Низкий | больше 1 года назад |
 | CVE-2024-24791 The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2024-24791 Denial of service due to improper 100-continue handling in net/http | CVSS3: 7.5 | 1% Низкий | около 2 месяцев назад |
| CVE-2024-24791 The net/http HTTP/1.1 client mishandled the case where a server respon ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | SUSE-SU-2024:2548-1 Security update for podman | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:2383-1 Security update for skopeo | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:1989-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:1988-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:1838-1 Security update for warewulf4 | 1% Низкий | больше 1 года назад | |
 | ROS-20240729-16 Уязвимость cri-o | CVSS3: 8.3 | 1% Низкий | около 1 года назад |
| ROS-20240719-01 Уязвимость podman | CVSS3: 8.3 | 1% Низкий | больше 1 года назад |
| ROS-20240711-04 Уязвимость skopeo | CVSS3: 8.3 | 1% Низкий | больше 1 года назад |
| ROS-20240711-02 Уязвимость buildah | CVSS3: 8.3 | 1% Низкий | больше 1 года назад |
| GHSA-6wvf-f2vw-3425 github.com/containers/image allows unexpected authenticated registry accesses | CVSS3: 8.3 | 1% Низкий | больше 1 года назад |
 | BDU:2024-05780 Уязвимость библиотеки github.com/containers/image, связанная с неправильной проверкой значения целостности, позволяющая нарушителю вызвать отказ в обслуживании, выполнить атаку обхода локального пути или оказать иное воздействие | CVSS3: 8.3 | 1% Низкий | больше 1 года назад |
| SUSE-SU-2024:2309-1 Security update for go1.22 | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:2308-1 Security update for go1.21 | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2024:2295-1 Security update for go1.22 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу