Known vulnerabilities in candlepin (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
candlepin (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:candlepin_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
50
Public exploits:
4
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.7.5-1.el9sat
4.6.6-1.el9sat
4.4.25-1.el8sat
4.4.25-1.el9sat
4.6.5-1.el9sat
4.4.23-1.el9sat
4.6.4-2.el9sat
4.4.21-1.el8sat
4.4.21-1.el9sat
4.4.20-1.el8sat
4.4.20-1.el9sat
4.4.16-1.el8sat
4.4.16-1.el9sat
4.3.12-1.el8sat
4.3.11-1.el8sat
4.3.1-1.el8sat
4.1.20-1.el8sat
4.1.19-1.el7sat
4.1.19-1.el8sat
4.0.9-1.el7sat
2.9.30-1.el7sat
3.1.21-1.el7sat
2.9.28-1.el7sat
2.6.16-1.el7sat
2.6.13-1.el7sat
4.1.18-1.el8sat
4.1.15-1.el8sat
4.1.13-1.el7sat
4.1.13-1.el8sat
4.0.15-1.el7sat
3.1.26-1.el7sat
2.5.22-1.el7sat
2.9.25-1.el7sat
2.6.9-1.el7sat
2.5.15-1.el7sat
0.8.26.0-1.el6sam
2.6.13-1.el7
2.6.9-1.el7
2.5.17-1.el7
2.5.15-1.el7
2.4.13-1.el7
2.4.8-1.el7
2.1.24-1.el7
2.1.18-1.el7
2.1.15-1.el7
2.1.14-1.el7
0.9.54.28-1.el7
0.9.54.26-1.el7
0.9.54.23-1.el7
0.9.54.21-1.el7
0.9.54.20-1.el7
0.9.54.17-1.el7
0.9.54.15-1.el7
0.9.54.14-1.el7
0.9.54.10-1.el7
0.9.54.7-1.el7
0.9.49.23-1.el7
0.9.49.19-1.el7
0.9.49.16-1.el7
0.9.49.12-1.el7
0.9.49.11-1.el7
0.9.49.9-1.el7
0.9.49.8-1.el7
0.9.49.6-1.el7
0.9.49.3-1.el7
0.9.23.1-1.el7
0.9.23-1.el7
0.9.54.28-1.el6
0.9.54.26-1.el6
0.9.54.23-1.el6
0.9.54.21-1.el6
0.9.54.20-1.el6
0.9.54.17-1.el6
0.9.54.15-1.el6
0.9.54.14-1.el6
0.9.54.10-1.el6
0.9.54.7-1.el6
0.9.49.23-1.el6
0.9.49.19-1.el6
0.9.49.16-1.el6
0.9.49.12-1.el6
0.9.49.11-1.el6
0.9.49.9-1.el6
0.9.49.8-1.el6
0.9.49.6-1.el6
0.9.49.3-1.el6
0.9.23.1-1.el6
0.9.23-1.el6_5
0.9.6.5-1.el6
0.9.6.4-1.el6
0.9.6-1.el6_5
0.8.26.0-1.el6
0.8.26-1.el6
0.7.24-1.el6_3
0.7.23-1.el6_3
0.7.19-3.el6
0.7.8.1-1.el6
0.6.5-1.el6_2
0.5.26-1.el6
Vulnerabilities (50)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86416 - Insufficient Verification of Data Authenticity CVE-2023-26141 |
CWE-345 | Low | 4.3.11-1.el8sat | 13.02.2024 |
SB2024021345 SB2024021549 |
||
| #VU82653 - Resource exhaustion CVE-2023-4785 |
CWE-400 | Medium | 4.3.11-1.el8sat | 01.11.2023 |
SB2023110125 SB2024021549 SB2024022138 and 9 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 4.3.11-1.el8sat | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU79937 - Resource exhaustion CVE-2023-0809 |
CWE-400 | Medium | 4.3.11-1.el8sat | 24.08.2023 |
SB2023082416 SB2023082419 SB2023082420 and 12 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 4.3.11-1.el8sat | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
||
| #VU69545 - Incorrect Default Permissions CVE-2022-41946 |
CWE-276 | Low | 4.1.20-1.el8sat | 23.11.2022 |
SB2022112335 SB2023010922 SB2023011025 and 42 more |
||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | 4.1.18-1.el8sat | 14.10.2022 |
SB2022101405 SB2022102709 SB2022110306 and 91 more |
||
| #VU65868 - Deserialization of Untrusted Data CVE-2022-32224 |
CWE-502 | Medium | 4.1.18-1.el8sat | 28.07.2022 |
SB2022072836 SB2023011881 SB2023050806 and 2 more |
||
| #VU61248 - Improper Authentication CVE-2021-4142 |
CWE-287 | Medium | 4.0.15-1.el7sat | 10.03.2022 |
SB2022031037 |
||
| #VU20844 - Protection Mechanism Failure CVE-2019-10086 |
CWE-693 | Low | 2.5.22-1.el7sat | 04.09.2019 |
SB2019090405 SB2019090406 SB2019121902 and 112 more |
Showing elements 41 - 60 out of 50