Security Advisory 0099 PDF Date: July 2nd, 2024 Revision | Date | Changes ---|---|--- 1.0 | July 2, 2024 | Initial release The CVE-ID tracking this issue: CVE-2024-27892 CVSSv3.1 Base Score: 9.6 (C ...
Continue ReadingJuly 02, 2024
-= Per source details. Do not edit below this...Read More ...
Continue ReadingJune 28, 2024
The grpc Unary Server Interceptor created by the otelgrpc package added the labels net.peer.sock.addr and net.peer.sock.port with unbounded cardinality. This can lead to the server's potential me ...
Continue ReadingJune 27, 2024
The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:1637-2 advisory ...
Continue ReadingJune 21, 2024
DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC...Read More ...
Continue ReadingJune 20, 2024
DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC...Read More ...
Continue ReadingJune 18, 2024
DoS in KAS in GitLab CE/EE affecting all versions from 16.10.0 prior to 16.10.6 and 16.11.0 prior to 16.11.3 allows an attacker to crash KAS via crafted gRPC...Read More ...
Continue ReadingJune 15, 2024
github.com/klauspost/compress/zstd is vulnerable to a Denial of service (DoS). The vulnerability is due to its zstd decompression implementation not respecting the limits imposed by gRPC, which allows ...
Continue ReadingJune 14, 2024
Back to Main