Known vulnerabilities in git-lfs (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
git-lfs (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:git-lfs_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
30
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.7.1-4.el9_8.2
3.7.1-5.el10_2.6
3.4.1-12.el8_10
3.7.1-5.el10_2.5
3.4.1-11.el8_10
2.13.3-3.el8_6.7
2.13.3-3.el8_4.5
3.6.1-2.el9_6.4
3.6.1-2.el10_0.4
3.4.1-10.el8_10
3.6.1-8.el9_7.1
3.4.1-4.el9_4.5
3.6.1-2.el9_6.3
2.13.3-5.el9_0.7
3.6.1-2.el10_0.3
3.2.0-2.el9_2.6
3.6.1-8.el9_7
3.6.1-2.el10_0.2
3.6.1-7.el10_1
3.2.0-2.el8_8.6
2.13.3-3.el8_4.4
2.13.3-5.el9_0.6
3.2.0-2.el9_2.5
3.4.1-4.el9_4.4
3.6.1-2.el9_6.2
3.6.1-7.el9_7
3.4.1-7.el8_10
2.13.3-5.el9_0.5
2.13.3-3.el8_6.5
3.2.0-2.el8_8.5
2.13.3-3.el8_4.3
3.6.1-2.el10_0.1
3.4.1-4.el9_4.3
3.2.0-2.el9_2.4
3.6.1-2.el9_6.1
3.4.1-6.el8_10
3.6.1-4.el9_7
3.6.1-4.el10_1
3.6.1-1.el9
2.13.3-5.el9_0.4
3.2.0-2.el9_2.3
3.2.0-2.el8_8.4
2.13.3-3.el8_6.4
3.4.1-4.el8_10
2.13.3-3.el8_4.1
2.13.3-3.el8_6.3
3.2.0-2.el8_8.3
3.4.1-4.el9_4.1
2.13.3-5.el9_0.3
3.2.0-2.el9_2.2
3.4.1-4.el9_5
3.2.0-2.el8_8.2
2.13.3-3.el8_6.2
2.11.0-2.el8_4.3
2.13.3-5.el9_0.2
3.2.0-2.el9_2.1
3.4.1-4.el9_4
3.4.1-3.el8_10
3.2.0-1.el9_2
2.11.0-2.el8_4.2
3.2.0-2.el8_8.1
2.13.3-3.el8_6.1
2.13.3-5.el9_0.1
3.4.1-2.el8_10
3.4.1-2.el9_4
3.2.0-3.el8_9
3.2.0-2.el9_3
3.2.0-2.el8
3.2.0-1.el9
2.13.3-3.el8_6
Vulnerabilities (30)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU70334 - Allocation of Resources Without Limits or Throttling CVE-2022-41717 |
CWE-770 | Medium | 3.2.0-1.el9, 3.2.0-2.el8 | 14.12.2022 |
SB2022121432 SB2022121433 SB2022121435 and 185 more |
||
| #VU68779 - Improper Validation of Array Index CVE-2020-28852 |
CWE-129 | Medium | 2.13.3-3.el8_6 | 26.10.2022 |
SB2021010205 SB2022102674 SB2022111597 and 13 more |
||
| #VU68390 - Resource exhaustion CVE-2022-41715 |
CWE-400 | Medium | 3.2.0-1.el9, 3.2.0-2.el8 | 18.10.2022 |
SB2022101833 SB2022101834 SB2022102005 and 113 more |
||
| #VU67396 - Improper input validation CVE-2022-27664 |
CWE-20 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 15.09.2022 |
SB2022091520 SB2022091521 SB2022092144 and 127 more |
||
| #VU66121 - Improper input validation CVE-2022-32189 |
CWE-20 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 04.08.2022 |
SB2022080502 SB2022080503 SB2022080511 and 81 more |
||
| #VU66068 - Resource exhaustion CVE-2022-30635 |
CWE-400 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 86 more |
||
| #VU66067 - Resource exhaustion CVE-2022-30632 |
CWE-400 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 79 more |
||
| #VU66066 - Security Features CVE-2022-32148 |
CWE-254 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 86 more |
||
| #VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-1705 |
CWE-444 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 86 more |
||
| #VU66063 - Resource exhaustion CVE-2022-30630 |
CWE-400 | Medium | 2.13.3-3.el8_6, 3.2.0-1.el9 | 03.08.2022 |
SB2022080321 SB2022080323 SB2022080324 and 79 more |
Showing elements 21 - 40 out of 30