Known vulnerabilities in appstream-data (Red Hat package)

Known vulnerabilities in appstream-data (Red Hat package)

Vendor: Red Hat Inc.

Software: appstream-data (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:appstream-data_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU29244 - Access of Uninitialized Pointer CVE-2019-11459	CWE-824	Low	No	No	8-20190805.el8	25.06.2020	SB2019042313 SB2020071719 SB2019100321 and 8 more
#VU18791 - Permissions, Privileges, and Access Controls CVE-2019-12795	CWE-264	Low	No	No	8-20190805.el8	13.06.2019	SB2019070801 SB2019070802 SB2019072234 and 5 more
#VU18678 - Permissions, Privileges, and Access Controls CVE-2019-12447	CWE-264	Critical	No	No	8-20191129.el8	05.06.2019	SB2019070801 SB2019070802 SB2020042843 and 3 more
#VU18677 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2019-12448	CWE-362	High	No	No	8-20191129.el8	05.06.2019	SB2019070801 SB2019070802 SB2020042843 and 3 more
#VU18676 - Permissions, Privileges, and Access Controls CVE-2019-12449	CWE-264	Critical	No	No	8-20191129.el8	05.06.2019	SB2019070801 SB2019070802 SB2020042843 and 3 more
#VU17666 - Permissions, Privileges, and Access Controls CVE-2019-3825	CWE-264	Low	No	No	8-20191129.el8	14.02.2019	SB2019021402 SB2019030810 SB2019030304 and 4 more
#VU16692 - Stack-based buffer overflow CVE-2018-20337	CWE-121	Low	No	No	8-20191129.el8	25.12.2018	SB2018122504 SB2019012912 SB2019052213 and 2 more