azure linux node-problem-detector vulnerabilities

Latest azure linux node-problem-detector CVEs

Newest publication first

1. CVE-2025-22868 Unexpected memory consumption during token parsing in golang.org/x/oauth2

   Published 2025-02-26

   High·CVSS 7.5

   An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

2. CVE-2025-22869 Potential denial of service in golang.org/x/crypto

   Published 2025-02-26

   High·CVSS 7.5

   SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

3. CVE-2024-45338 Non-linear parsing of case-insensitive content in golang.org/x/net/html

   Published 2024-12-18

   Medium·CVSS 5.3

   An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.