Known vulnerabilities in galera (Red Hat package)

Vendor: Red Hat Inc.
Software: galera (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:galera_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 51
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting galera (Red Hat package) galera (Red Hat package) is affected by 51 known vulnerabilities: 17 medium, 34 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120623 - Insecure Automated Optimizations
CVE-2023-52970		 CWE-1038 Low
No
No
 26.4.22-1.el9_6 29.12.2025 SB2025122915
SB2025122918
SB2025122926
and 12 more
#VU120622 - Insecure Automated Optimizations
CVE-2023-52969		 CWE-1038 Low
No
No
 26.4.22-1.el9_6 29.12.2025 SB2025122915
SB2025122918
SB2025122920
and 16 more
#VU107533 - Improper input validation
CVE-2025-30722		 CWE-20 Medium
No
No
 26.4.22-1.el9_6 16.04.2025 SB20250416139
SB20250416141
SB2025042536
and 18 more
#VU107534 - Improper input validation
CVE-2025-30693		 CWE-20 Medium
No
No
 26.4.22-1.el9_6 16.04.2025 SB20250416139
SB20250416141
SB2025042536
and 18 more
#VU103188 - Improper input validation
CVE-2025-21490		 CWE-20 Medium
No
No
 26.4.22-1.el9_6 21.01.2025 SB2025012217
SB2025013052
SB2025020602
and 21 more
#VU88696 - Improper input validation
CVE-2024-21096		 CWE-20 Low
No
No
 26.4.20-1.el9_5 17.04.2024 SB2024041799
SB2024051083
SB2024051084
and 40 more
#VU82154 - Improper input validation
CVE-2023-22084		 CWE-20 Medium
No
No
 26.4.20-1.el9_5 17.10.2023 SB20231017100
SB2023110151
SB2023111466
and 31 more
#VU81995 - Resource exhaustion
CVE-2023-5157		 CWE-400 Medium
No
No
 26.4.14-1.el9_0, 26.4.14-1.el9_2 13.10.2023 SB2023101315
SB2023101320
SB2023101609
and 8 more
#VU77142 - NULL Pointer Dereference
CVE-2022-47015		 CWE-476 Medium
No
No
 26.4.14-1.el9_2 11.06.2023 SB2023061103
SB2023061107
SB2023061108
and 19 more
#VU67656 - Resource Management Errors
CVE-2022-38791		 CWE-399 Low
No
No
 26.4.14-1.el9_2 26.09.2022 SB2022092649
SB2022092659
SB2023030643
and 27 more
#VU66552 - Reachable Assertion
CVE-2022-32082		 CWE-617 Medium
No
No
 26.4.14-1.el9_2 16.08.2022 SB2022081648
SB2022081650
SB2022090743
and 27 more
#VU66024 - Memory corruption
CVE-2022-32084		 CWE-119 Low
No
No
 26.4.14-1.el9_2 03.08.2022 SB2022080403
SB2022080424
SB2022081650
and 35 more
#VU65822 - Memory corruption
CVE-2022-32089		 CWE-119 Low
No
No
 26.4.14-1.el9_2 27.07.2022 SB2022081650
SB2022090743
SB2022090922
and 27 more
#VU65821 - Memory corruption
CVE-2022-32091		 CWE-119 Low
No
No
 26.4.14-1.el9_2 27.07.2022 SB2022072739
SB2022081650
SB2022090743
and 32 more
#VU65754 - Memory corruption
CVE-2022-32081		 CWE-119 Medium
No
No
 26.4.14-1.el9_2 25.07.2022 SB2022081650
SB2022090743
SB2022090922
and 27 more
#VU63827 - Use After Free
CVE-2021-46669		 CWE-416 Medium
No
No
 26.4.11-1.el9_0 31.05.2022 SB2022061533
SB2022061727
SB2022062431
and 27 more
#VU63515 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27381		 CWE-89 Low
No
No
 26.4.11-1.el9_0 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 23 more
#VU63514 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27380		 CWE-89 Low
No
No
 26.4.11-1.el9_0 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 22 more
#VU63512 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27379		 CWE-89 Low
No
No
 26.4.11-1.el9_0 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 19 more
#VU63510 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27378		 CWE-89 Low
No
No
 26.4.11-1.el9_0 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 21 more


Showing elements 1 - 20 out of 51