Archive
21 May 2021
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Low 3.1
IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters …
-
Low —
A failed upgrade may lead to hung goroutines
### Impact Processes using tableflip may encounter hung goroutines in the parent process, after a failed upgrade. The Go runtime has annoying behaviour around setting and clearing O_NONBLOCK: exec.Cmd.Start() ends up calling os.File.Fd() for any file in exec.…
-
Low —
Network policy may be bypassed by some ICMP Echo Requests
## Impact Under certain conditions, ICMP Echo Request sent to a Cilium endpoint from an actor may bypass a network policy which _disallows_ access from the actor to the endpoint, but _allows_ from the endpoint to the actor. This does _NOT_ apply to UDP and TC…