Known vulnerabilities in apache-commons-compress (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:apache-commons-compress_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
8
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65358 - Exposure of sensitive information to an unauthorized actor CVE-2022-31051 |
CWE-200 | Medium | 1.21-1.2.el8ev | 15.07.2022 |
SB2022071701 |
||
| #VU63709 - Incorrect Regular Expression CVE-2021-33623 |
CWE-185 | Medium | 1.21-1.2.el8ev | 26.05.2022 |
SB2022071701 SB2023040536 SB2023051544 and 2 more |
||
| #VU61760 - Incorrect Regular Expression CVE-2022-22950 |
CWE-185 | Medium | 1.21-1.2.el8ev | 31.03.2022 |
SB2022033110 SB2022060308 SB2022060324 and 25 more |
||
| #VU57967 - Improper input validation CVE-2021-3807 |
CWE-20 | Medium | 1.21-1.2.el8ev | 05.11.2021 |
SB2021110513 SB2021112603 SB2022042257 and 51 more |
||
| #VU54854 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-35515 |
CWE-835 | Medium | 1.21-1.2.el8ev | 14.07.2021 |
SB2021071408 SB2021080809 SB2021100411 and 23 more |
||
| #VU54853 - Resource exhaustion CVE-2021-36090 |
CWE-400 | Medium | 1.21-1.2.el8ev | 14.07.2021 |
SB2021071408 SB2021080809 SB2021100411 and 70 more |
||
| #VU54852 - Resource exhaustion CVE-2021-35517 |
CWE-400 | Medium | 1.21-1.2.el8ev | 14.07.2021 |
SB2021071408 SB2021080809 SB2021100411 and 33 more |
||
| #VU54851 - Resource exhaustion CVE-2021-35516 |
CWE-400 | Medium | 1.21-1.2.el8ev | 14.07.2021 |
SB2021071408 SB2021080809 SB2021100411 and 21 more |