https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:57:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-227198 EUVD-2026-227198 https://cve.radiocsirt.org/vuln/euvd-2026-227198 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0296 <p>The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.</p> <p>The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0296 https://cve.radiocsirt.org/vuln/ghsa-wpff-vmpr-5q22 <p>The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.</p> <p>The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.</p> https://cve.radiocsirt.org/vuln/ghsa-wpff-vmpr-5q22 https://cve.radiocsirt.org/vuln/gsd-2023-0296 gsd-2023-0296 https://cve.radiocsirt.org/vuln/gsd-2023-0296 https://cve.radiocsirt.org/vuln/rhsa-2022:7399 <p>golang: out-of-bounds read in golang.org/x/text/language leads to DoS golang: net/http: improper sanitization of Transfer-Encoding header golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters prometheus/client_golang: Denial of service using InstrumentHandlerCounter golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working golang: net/url: JoinPath does not strip relative path components in all circumstances vault: insufficient certificate revocation list checking golang: regexp/syntax: limit memory used by parsing regexps openshift: etcd grpc-proxy vulnerable to The Birthday attack against 64-bit block cipher</p> <p>golang: out-of-bounds read in golang.org/x/text/language leads to DoS golang: net/http: improper sanitization of Transfer-Encoding header golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters prometheus/client_golang: Denial of service using InstrumentHandlerCounter golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working golang: net/url: JoinPath does not strip relative path components in all circumstances vault: insufficient certificate revocation list checking golang: regexp/syntax: limit memory used by parsing regexps openshift: etcd grpc-proxy vulnerable to The Birthday attack against 64-bit block cipher</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7399 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0187 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0187