Skip to content
OpenAdvisories

Package · Wolfi

datadog-agent-7.80-oci-compat

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.8

    containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service

    containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in internal/cri/server/container_execsync.go when CRI ExecSync is u…

  • Medium 6.3

    gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion

    gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY pol…