Open Source Vulnerabilities

qemu

Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p

libxpm

flaw was found in libXpm

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, minio, consul, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations

qemu

Memory leak in hw/net/eepro100

libxpm

flaw was found in libXpm

qemu

rtl8139_cplus_transmit function in hw/net/rtl8139

libxpm

flaw was found in libXpm

qemu

intel_hda_xfer function in hw/audio/intel-hda

libxpm

vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system

qemu

rocker_io_writel function in hw/net/rocker/rocker

grafana, grafana

Security fix for GHSA-q9hv-hpm4-hj6x applied in: grafana 12.2.6-r0, grafana 12.1.8-r0

libxpm

vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function

qemu

v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal

qemu

Memory leak in the v9fs_read function in hw/9pfs/9p

datadog-agent-core-integrations

datadog-agent-core-integrations

datadog-agent-core-integrations

datadog-agent-core-integrations

datadog-agent-core-integrations

qemu

xhci_ring_fetch function in hw/usb/hcd-xhci

nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

"go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp")

qemu

Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci

qemu

Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu

qemu

rom_copy() in hw/core/loader

nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

"go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames

qemu

out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4

grafana

Security fix for GHSA-3xc5-wrhm-f963 applied in: grafana 12.1.10-r3

qemu

eth_get_gso_type in net/eth

grafana

Security fix for GHSA-m7cr-m3pv-hgrp applied in: grafana 12.1.10-r4

qemu

ati_2d_blt in hw/display/ati_2d

qemu

QEMU 4

grafana

Security fix for GHSA-crhj-59gh-8x96 applied in: grafana 12.1.10-r4

qemu

In QEMU 4

grafana

Security fix for GHSA-389r-gv7p-r3rp applied in: grafana 12.1.10-r4

consul, consul, step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, nodetaint, grafana, consul, grafana, grafana, gatekeeper, gatekeeper-fips, grafana, etcd, minio, consul, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

qemu

oss_write in audio/ossaudio

prometheus-alertmanager-fips, alertmanager-fips

Alertmanager handles alerts sent by client applications such as the Prometheus server

grafana

go-git is an extensible git implementation library written in pure Go

qemu

ati-vga in hw/display/ati

grafana

go-git is an extensible git implementation library written in pure Go

qemu

hw/pci/pci

grafana, trivy

go-git is an extensible git implementation library written in pure Go

qemu

hw/pci/msix

grafana

Security fix for GHSA-m3xc-h892-ggx6 applied in: grafana 12.1.10-r4

qemu

address_space_map in exec

grafana

Security fix for GHSA-qw64-3x98-g7q2 applied in: grafana 12.1.10-r4

qemu

hw/net/e1000e_core

qemu

fdctrl_write_data in hw/block/fdc

grafana

Billy is an interface filesystem abstraction for Go

qemu

hw/usb/hcd-ohci