Known vulnerabilities in OpenShift Service Mesh 2.3.0
Vendor:
Red Hat Inc.
Software:
OpenShift Service Mesh
Version:
2.3.0
Software CPE:
cpe:2.3:a:red_hat:openshift_service_mesh:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
84
Public exploits:
6
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2.6.12
2.6.11
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.4
2.6.1
2.6.0
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
2.5.10
2.6.5
2.5.8
2.4.14
2.5.7
2.4.13
2.5.6
2.6.3
2.6.2
2.5.5
2.4.11
2.4.8
2.5.2
2.5.1
2.5.0
2.4.5
2.2.12
2.2.11
2.3.8
2.3.7
2.4.4
2.4.3
2.2.10
2.2.9
2.3.6
2.4.2
2.4.1
2.3.5
2.3.4
2.3.3
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.4.0
2.3.2
2.1.6
2.3.1
2.3.0
1.0
2.1.5.1
2.2.2
2.1.5
2.0.11
2.2.1
2.2.0
2.1.4
2.1.3
2.0.10
2.1.2.1
2.1.2
2.0.9
2.1.1
2.1.0
2.0.8
2.0.7.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
Vulnerabilities (84)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82064 - Resource exhaustion CVE-2023-39325 |
CWE-400 | Medium | 2.2.11, 2.2.12, 2.3.8, 2.4.4, 2.4.5 | 16.10.2023 |
SB2023101651 SB2023101652 SB2023101653 and 341 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 2.2.11, 2.2.12, 2.3.8, 2.4.4, 2.4.5, 2.4.8, 2.5.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 648 more |
||
| #VU81453 - Use After Free CVE-2023-4813 |
CWE-416 | Medium | 2.2.11, 2.3.8, 2.4.4 | 04.10.2023 |
SB2023100435 SB2023100579 SB2023100581 and 91 more |
||
| #VU81447 - Use After Free CVE-2023-4806 |
CWE-416 | Medium | 2.2.11, 2.3.8, 2.4.4 | 03.10.2023 |
SB2023100363 SB2023100402 SB2023100418 and 97 more |
||
| #VU81437 - Memory corruption CVE-2023-4911 |
CWE-119 | Low | 2.2.11, 2.3.8, 2.4.4 | 03.10.2023 |
SB2023100343 SB2023100345 SB2023100402 and 94 more |
||
| #VU81097 - Out-of-bounds read CVE-2023-4527 |
CWE-125 | Medium | 2.2.11, 2.3.8, 2.4.4 | 25.09.2023 |
SB2023092525 SB2023100345 SB2023100402 and 79 more |
||
| #VU80931 - Resource exhaustion CVE-2023-3341 |
CWE-400 | Medium | 2.2.11, 2.3.8, 2.4.4 | 20.09.2023 |
SB2023092048 SB2023092050 SB2023092148 and 90 more |
||
| #VU80228 - Cleartext Transmission of Sensitive Information CVE-2023-40217 |
CWE-319 | Medium | 2.2.11, 2.2.12, 2.3.8, 2.4.4, 2.4.5 | 01.09.2023 |
SB2023090142 SB2023090143 SB2023090144 and 139 more |
||
| #VU78682 - Use After Free CVE-2023-35942 |
CWE-416 | Medium | 2.3.6, 2.4.3 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081405 and 3 more |
||
| #VU78681 - Use After Free CVE-2023-35943 |
CWE-416 | Medium | 2.3.6, 2.4.2 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 3 more |
||
| #VU78679 - Improper input validation CVE-2023-35944 |
CWE-20 | High | 2.2.10, 2.3.6, 2.4.2 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78678 - Improper Encoding or Escaping of Output CVE-2023-35941 |
CWE-116 | High | 2.2.10, 2.3.6, 2.4.2 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78490 - Permissions, Privileges, and Access Controls CVE-2023-34969 |
CWE-264 | Low | 2.2.10, 2.2.11, 2.3.8, 2.4.3, 2.4.4 | 21.07.2023 |
SB2023072119 SB2023072121 SB2023072122 and 61 more |
||
| #VU78293 - Missing release of memory after effective lifetime CVE-2023-35945 |
CWE-401 | Medium | 2.2.10, 2.3.6 | 16.07.2023 |
SB2023071620 SB2023080913 SB2023081405 and 18 more |
||
| #VU77612 - Resource exhaustion CVE-2023-2828 |
CWE-400 | Medium | 2.3.6, 2.4.2 | 21.06.2023 |
SB2023062155 SB2023062201 SB2023062601 and 66 more |
||
| #VU75740 - Improper Authentication CVE-2023-2283 |
CWE-287 | High | 2.2.8, 2.2.10, 2.3.5, 2.4.1 | 04.05.2023 |
SB2023050456 SB2023050501 SB2023052441 and 84 more |
||
| #VU75432 - Permissions, Privileges, and Access Controls CVE-2023-30630 |
CWE-264 | Low | 2.2.11, 2.3.8, 2.4.4 | 24.04.2023 |
SB2023042410 SB2023042412 SB2023042642 and 51 more |
||
| #VU75141 - Memory corruption CVE-2023-29491 |
CWE-119 | Low | 2.2.11, 2.3.8, 2.4.4, 2.4.8, 2.5.2 | 14.04.2023 |
SB2023041454 SB2023052328 SB2023052346 and 132 more |
||
| #VU74146 - Improper Privilege Management CVE-2023-26604 |
CWE-269 | Low | 2.2.8, 2.3.5, 2.4.1, 2.5.1 | 28.03.2023 |
SB2023032869 SB2023032871 SB2023040540 and 56 more |
||
| #VU72618 - Improper input validation CVE-2023-24329 |
CWE-20 | Medium | 2.2.8, 2.3.5, 2.4.1 | 28.02.2023 |
SB2023022819 SB2023022822 SB2023030832 and 158 more |
Showing elements 1 - 20 out of 84