Skip to content
OpenAdvisories

Archive

21 May 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.1

    IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters …

  • Low —

    A failed upgrade may lead to hung goroutines

    ### Impact Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The Go runtime has annoying behaviour around setting and clearing O_NONBLOCK: exec.Cmd.Start() ends up calling os.File.Fd() for any file in exec.…

  • Low —

    Network policy may be bypassed by some ICMP Echo Requests

    ## Impact Under certain conditions, ICMP Echo Request sent to a Cilium endpoint from an actor may bypass a network policy which _disallows_ access from the actor to the endpoint, but _allows_ from the endpoint to the actor. This does _NOT_ apply to UDP and TC…