VulnerableCode Package Details - pkg:rpm/redhat/kubevirt@4.12.0-1057?arch=el7

Search for packages

Vulnerability	Summary	Fixed by
VCID-2dh6-y93r-2ucc Aliases: CVE-2021-38561 GHSA-ppp9-7jff-5vj2	golang.org/x/text/language Out-of-bounds Read vulnerability golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.	There are no reported fixed by versions.
VCID-2zj9-xmsh-xbcn Aliases: CVE-2021-44717	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-498g-zap2-vqag Aliases: CVE-2022-30635	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-5c67-zpsw-cyb2 Aliases: CVE-2022-28131	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-6189-d1tw-bfcp Aliases: CVE-2022-30630	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-7e1n-pvrt-g3fy Aliases: CVE-2022-24921	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-81aw-mk9s-eydd Aliases: CVE-2022-32148	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-86mk-kwg6-63h6 Aliases: CVE-2022-30633	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-as38-uuy9-5qhu Aliases: CVE-2022-1962	golang: go/parser: stack exhaustion in all Parse* functions	There are no reported fixed by versions.
VCID-g8y7-jdy7-afdh Aliases: CVE-2022-30632	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-k4dy-pv3f-4qas Aliases: CVE-2022-30629	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-ps89-8u5a-kfc8 Aliases: CVE-2022-1705	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-vxks-1bkp-6bd5 Aliases: CVE-2022-30631	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.
VCID-w53f-uad6-gqdn Aliases: CVE-2021-44716 GHSA-vc3p-29h2-gpcp	Multiple vulnerabilities have been found in Go, the worst of which could result in remote code execution.	There are no reported fixed by versions.

Vulnerability

Summary

Fixed by

VCID-2dh6-y93r-2ucc
Aliases:
CVE-2021-38561
GHSA-ppp9-7jff-5vj2

golang.org/x/text/language Out-of-bounds Read vulnerability golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.