Known vulnerabilities in katello (Red Hat package)
Vendor:
Red Hat Inc.
Software:
katello (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:katello_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
36
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.18.0-1.el9sat
4.16.0-1.el9sat
4.14.0-0.1.rc2.el8sat
4.14.0-0.1.rc2.el9sat
4.11.0-1.el8sat
4.9.0-1.el8sat
4.1.1-2.el7sat
3.16.0-1.el7sat
1.5.0-30.el6sat
1.5.0-30.el7sat
3.12.0-3.el7sat
4.5.0-1.el8sat
4.3.0-3.el7sat
4.3.0-3.el8sat
3.18.1-3.el7sat
3.14.0-6.el7sat
3.12.0-2.el7sat
3.10.0-0.6.rc1.el7sat
3.7.0-8.el7sat
3.4.5-15.el7sat
3.0.0-33.el6sat
3.0.0-33.el7sat
1.2.1-15h.el6_3
1.2.1.1-1h.el6_4
1.4.3.28-1.el6sam_splice
2.2.0.14-1.el7sat
2.2.0.14-1.el6_6sat
3.0.0-10.el6sat
3.0.0-10.el7sat
3.0.0-12.el6sat
3.0.0-12.el7sat
3.12.0-3.el7
3.12.0-2.el7
3.7.0-10.el7
3.7.0-8.el7
3.4.5-19.el7
3.4.5-18.el7
3.4.5-16.el7
3.4.5-15.el7
3.0.0-34.el7
3.0.0-33.el7
3.0.0-31.el7
3.0.0-27.el7
3.0.0-26.el7
3.0.0-21.el7
3.0.0-20.el7
3.0.0-19.el7
3.0.0-17.el7
3.0.0-15.el7
3.0.0-14.el7
3.0.0-13.el7
3.0.0-12.el7
3.0.0-11.el7
3.0.0-10.el7
2.2.0.19-1.el7
2.2.0.18-1.el7
2.2.0.17-1.el7
2.2.0.16-1.el7
2.2.0.15-1.el7
2.2.0.14-1.el7
1.5.0-30.el7
3.0.0-34.el6
3.0.0-33.el6
3.0.0-31.el6
3.0.0-27.el6
3.0.0-26.el6
3.0.0-21.el6
3.0.0-20.el6
3.0.0-19.el6
3.0.0-17.el6
3.0.0-15.el6
3.0.0-14.el6
3.0.0-13.el6
3.0.0-12.el6
3.0.0-11.el6
3.0.0-10.el6
2.2.0.19-1.el6_6
2.2.0.18-1.el6_6
2.2.0.17-1.el6_6
2.2.0.16-1.el6_6
2.2.0.15-1.el6_6
2.2.0.14-1.el6_6
1.5.0-30.el6
1.4.3.28-1.el6
1.4.3.26-1.el6
1.4.3.23-1.el6
1.4.3.20-1.el6
1.4.3.19-1.el6
1.4.3-18.el6
1.4.3-16.el6
0.3.4-1.el6_2
0.3.3-1.el6_2
0.1.307-1.el6
1.1.12.2-5.el6
1.1.12.1-1.el6
1.1.12-22.el6
0.1.320-1.el6
0.1.319-1.el6
0.1.318-1.el6
0.1.311-1.el6_2
Vulnerabilities (36)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27610 |
CWE-22 | Medium | 4.16.0-1.el9sat | 17.03.2025 |
SB2025031756 SB20250317118 SB20250317119 and 15 more |
||
| #VU105689 - Improper Control of Generation of Code ('Code Injection') CVE-2025-27407 |
CWE-94 | High | 4.16.0-1.el9sat | 13.03.2025 |
SB2025031315 SB2025031316 SB2025040330 and 3 more |
||
| #VU103000 - Improper input validation CVE-2024-56374 |
CWE-20 | Medium | 4.16.0-1.el9sat | 20.01.2025 |
SB2025012005 SB2025012029 SB2025012030 and 11 more |
||
| #VU101972 - Security Features CVE-2024-56326 |
CWE-254 | Low | 4.16.0-1.el9sat | 27.12.2024 |
SB2024122789 SB2024122790 SB2024122791 and 78 more |
||
| #VU99570 - Exposure of sensitive information to an unauthorized actor CVE-2024-8553 |
CWE-200 | Low | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 31.10.2024 |
SB20241031110 SB2024110111 SB2024110112 and 2 more |
||
| #VU99568 - Missing release of memory after effective lifetime CVE-2024-8376 |
CWE-401 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 31.10.2024 |
SB20241031109 SB2024110111 SB2024110112 and 7 more |
||
| #VU97594 - Improper Authentication CVE-2024-7923 |
CWE-287 | High | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU97593 - Improper Authentication CVE-2024-7012 |
CWE-287 | High | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU96644 - Improper input validation CVE-2024-7246 |
CWE-20 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 30.08.2024 |
SB2024083031 SB2024083036 SB2024090612 and 11 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-5569 |
CWE-835 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 26.07.2024 |
SB2024072688 SB2024072690 SB2024072692 and 59 more |
||
| #VU94188 - Improper input validation CVE-2024-39614 |
CWE-20 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 15 more |
||
| #VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330 |
CWE-22 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329 |
CWE-200 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 14 more |
||
| #VU94182 - Improper input validation CVE-2024-38875 |
CWE-20 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU92406 - Incorrect Regular Expression CVE-2024-4067 |
CWE-185 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 20.06.2024 |
SB20240620121 SB2024062832 SB2024070501 and 41 more |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 194 more |
||
| #VU87734 - Resource exhaustion CVE-2024-28863 |
CWE-400 | Medium | 4.14.0-0.1.rc2.el8sat, 4.14.0-0.1.rc2.el9sat | 22.03.2024 |
SB2024032234 SB2024052306 SB2024061114 and 30 more |
||
| #VU85747 - Observable discrepancy CVE-2023-52323 |
CWE-203 | Low | 4.11.0-1.el8sat | 24.01.2024 |
SB2024012414 SB2024012416 SB2024022053 and 24 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 4.11.0-1.el8sat | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
Showing elements 1 - 20 out of 36