Known vulnerabilities in haproxy (Red Hat package) - page 4

Vendor: Red Hat Inc.

Software: haproxy (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:haproxy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 117

Public exploits: 7

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (117)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU73197 - Exposure of sensitive information to an unauthorized actor CVE-2023-27904	CWE-200	Low	No	No	2.2.19-4.el8	09.03.2023	SB2023030922 SB2023041270 SB2023041272 and 10 more
#VU73196 - Incorrect Default Permissions CVE-2023-27903	CWE-276	Low	No	No	2.2.19-4.el8	09.03.2023	SB2023030922 SB2023041270 SB2023041272 and 9 more
#VU73188 - Improper Control of Generation of Code ('Code Injection') CVE-2023-27899	CWE-94	Medium	No	No	2.2.19-4.el8	09.03.2023	SB2023030922 SB2023041270 SB2023041272 and 2 more
#VU68390 - Resource exhaustion CVE-2022-41715	CWE-400	Medium	No	No	2.2.24-2.el8	18.10.2022	SB2022101833 SB2022101834 SB2022102005 and 113 more
#VU68389 - Improper input validation CVE-2022-2880	CWE-20	Medium	No	No	2.2.24-2.el8	18.10.2022	SB2022101833 SB2022101834 SB2022102005 and 94 more
#VU68387 - Resource Management Errors CVE-2022-2879	CWE-399	Medium	No	No	2.2.24-2.el8	18.10.2022	SB2022101833 SB2022101834 SB2022102005 and 78 more
#VU64269 - Integer overflow CVE-2022-28327	CWE-190	Low	No	No	2.2.24-1.el8	14.06.2022	SB2022041004 SB2022061422 SB2022061506 and 90 more
#VU64266 - Buffer overflow CVE-2022-24675	CWE-120	Low	No	No	2.2.24-1.el8	14.06.2022	SB2022041004 SB2022061422 SB2022061511 and 88 more
#VU63493 - Improper Access Control CVE-2022-1706	CWE-284	Low	No	No	2.2.24-1.el8	20.05.2022	SB2022052015 SB2022071162 SB2022071163 and 9 more
#VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162	CWE-264	Medium	No	No	2.2.24-1.el8	12.05.2022	SB2022051205 SB2022062435 SB2022071158 and 32 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191	CWE-327	Medium	No	No	2.2.24-1.el8	10.04.2022	SB2022041004 SB2022041406 SB2022081226 and 91 more
#VU62037 - Incorrect Authorization CVE-2022-23773	CWE-863	Low	Available	No	2.2.24-1.el8	10.04.2022	SB2022041002 SB2022060126 SB2022060127 and 39 more
#VU62036 - Unchecked Return Value CVE-2022-23806	CWE-252	Medium	No	No	2.2.24-1.el8	10.04.2022	SB2022041002 SB2022041003 SB2022060126 and 46 more
#VU61599 - Improper input validation CVE-2022-21698	CWE-20	Medium	No	No	2.2.24-1.el8	24.03.2022	SB2022021530 SB2022032413 SB2022040807 and 110 more
#VU61227 - Incorrect Regular Expression CVE-2022-24921	CWE-185	Medium	No	No	2.2.24-1.el8	10.03.2022	SB2022031004 SB2022031005 SB2022041208 and 41 more
#VU60643 - UNIX Symbolic Link (Symlink) Following CVE-2022-25179	CWE-61	Medium	No	No	2.0.16-3.el7, 2.0.16-5.el8, 2.2.15-4.el8	16.02.2022	SB2022021608 SB2022032826 SB2022032910 and 4 more
#VU60641 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25183	CWE-94	Medium	No	No	2.0.16-3.el7, 2.0.16-5.el8, 2.2.15-4.el8	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60640 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25182	CWE-94	Medium	No	No	2.0.16-3.el7, 2.0.16-5.el8, 2.2.15-4.el8	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25174	CWE-78	Medium	No	No	2.0.16-3.el7, 2.0.16-5.el8, 2.2.15-4.el8	16.02.2022	SB2022021607 SB2022032826 SB2022032910 and 4 more
#VU60634 - UNIX Symbolic Link (Symlink) Following CVE-2022-25176	CWE-61	Medium	No	No	2.0.16-3.el7, 2.0.16-5.el8, 2.2.15-4.el8	16.02.2022	SB2022021606 SB2022032826 SB2022032910 and 4 more

Showing elements 61 - 80 out of 117

Known vulnerabilities in haproxy (Red Hat package) - page 4

Breakdown by Severity Chart

Vulnerabilities (117)

Please verify you're human