https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:52:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-05301 bdu:2023-05301 https://cve.radiocsirt.org/vuln/bdu:2023-05301 https://cve.radiocsirt.org/vuln/bell-cve-2021-20206 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-20206 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cleanstart-2024-os27994 <p><strong>Affected:</strong> CleanStart: buildah</p> <p>Security vulnerability affects the buildah package. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.</p> <p><strong>Affected:</strong> CleanStart: buildah</p> <p>Security vulnerability affects the buildah package. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.</p> https://cve.radiocsirt.org/vuln/cleanstart-2024-os27994 https://cve.radiocsirt.org/vuln/euvd-2026-21514 EUVD-2026-21514 https://cve.radiocsirt.org/vuln/euvd-2026-21514 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20206 <p>An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the &#39;type&#39; field in the network configuration, it is possible to use special elements such as &#34;../&#34; separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as &#39;reboot&#39;. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p>An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the &#39;type&#39; field in the network configuration, it is possible to use special elements such as &#34;../&#34; separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as &#39;reboot&#39;. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20206 https://cve.radiocsirt.org/vuln/ghsa-xjqr-g762-pxwp <p><strong>Affected:</strong> Go: github.com/containernetworking/cni</p> <p>An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the &#39;type&#39; field in the network configuration, it is possible to use special elements such as &#34;../&#34; separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as &#39;reboot&#39;. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. ### Specific Go Packages Affected github.com/containernetworking/cni/pkg/invoke</p> <p><strong>Affected:</strong> Go: github.com/containernetworking/cni</p> <p>An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the &#39;type&#39; field in the network configuration, it is possible to use special elements such as &#34;../&#34; separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as &#39;reboot&#39;. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. ### Specific Go Packages Affected github.com/containernetworking/cni/pkg/invoke</p> https://cve.radiocsirt.org/vuln/ghsa-xjqr-g762-pxwp https://cve.radiocsirt.org/vuln/gsd-2021-20206 gsd-2021-20206 https://cve.radiocsirt.org/vuln/gsd-2021-20206 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0770-1 <p>Security update for buildah</p> <p>Security update for buildah</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0770-1 https://cve.radiocsirt.org/vuln/rhsa-2021:0799 <p>golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash golang: data race in certain net/http servers including ReverseProxy can lead to DoS golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs jwt-go: access restriction bypass vulnerability golang-github-gorilla-websocket: integer overflow leads to denial of service golang: math/big: panic during recursive division of very large numbers golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration</p> <p>golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash golang: data race in certain net/http servers including ReverseProxy can lead to DoS golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs jwt-go: access restriction bypass vulnerability golang-github-gorilla-websocket: integer overflow leads to denial of service golang: math/big: panic during recursive division of very large numbers golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation containernetworking-cni: Arbitrary path injection via type field in CNI configuration</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0799 https://cve.radiocsirt.org/vuln/suse-su-2022:0770-1 <p>Security update for buildah</p> <p>Security update for buildah</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0770-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20206 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-appc-cni, Ubuntu:20.04:LTS: golang-github-appc-cni, Ubuntu:22.04:LTS: golang-github-appc-cni, Ubuntu:24.04:LTS: golang-github-appc-cni, Ubuntu:25.10: golang-github-appc-cni, Ubuntu:26.04:LTS: golang-github-appc-cni</p> <p>An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the &#39;type&#39; field in the network configuration, it is possible to use special elements such as &#34;../&#34; separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as &#39;reboot&#39;. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-appc-cni, Ubuntu:20.04:LTS: golang-github-appc-cni, Ubuntu:22.04:LTS: golang-github-appc-cni, Ubuntu:24.04:LTS: golang-github-appc-cni, Ubuntu:25.10: golang-github-appc-cni, Ubuntu:26.04:LTS: golang-github-appc-cni</p> <p>An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the &#39;type&#39; field in the network configuration, it is possible to use special elements such as &#34;../&#34; separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as &#39;reboot&#39;. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20206 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510