Search for packages
| purl | pkg:rpm/redhat/openshift-serverless-clients@1.12.0-7?arch=el8 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4psv-cefc-7kad
Aliases: CVE-2024-24783 |
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. | There are no reported fixed by versions. |
|
VCID-86md-jx8m-1kck
Aliases: CVE-2024-24784 |
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. | There are no reported fixed by versions. |
|
VCID-aj2b-56uj-gkar
Aliases: CVE-2023-45288 GHSA-4v7x-pqxf-cx7m |
net/http, x/net/http2: close connections when receiving too many headers An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection. | There are no reported fixed by versions. |
|
VCID-djny-bnab-ykaw
Aliases: CVE-2023-45289 |
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. | There are no reported fixed by versions. |
|
VCID-h93z-zvkv-cyed
Aliases: CVE-2024-24785 |
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. | There are no reported fixed by versions. |
|
VCID-wq29-hzz2-5beh
Aliases: CVE-2023-45290 |
Multiple vulnerabilities have been discovered in Go, the worst of which could lead to information leakage or a denial of service. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||