Known vulnerabilities in kubevirt (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
kubevirt (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:kubevirt_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
29
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
4.14.1-2150.el8
4.13.6-1596.el7
4.13.6-1596.el8
4.13.6-1596.el9
4.12.5-1189.el7
4.12.5-1189.el8
4.13.0-1469.el7
4.13.0-1469.el8
4.13.0-1469.el9
4.12.0-1057.el7
4.12.0-1057.el8
4.11.0-643.el8
4.10.1-489.el7
4.10.1-489.el8
2.6.10-230.el7
2.6.10-230.el8
4.8.5-278.el7
4.8.5-278.el8
4.8.3-251.el7
4.8.3-251.el8
2.6.8-211.el7
2.6.8-211.el8
0.23.1-11.el8
0.20.8-17.el8
0.23.1-11.el7
0.20.8-5.el7
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65006 - Out-of-bounds read CVE-2021-38561 |
CWE-125 | Medium | 4.12.0-1057.el7, 4.12.0-1057.el8 | 07.07.2022 |
SB2022070736 SB2022070742 SB2022071920 and 41 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 4.11.0-643.el8 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 4.10.1-489.el7, 4.10.1-489.el8 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |
||
| #VU58824 - Improper input validation CVE-2021-44716 |
CWE-20 | Medium | 4.12.0-1057.el7, 4.12.0-1057.el8 | 10.12.2021 |
SB2021121010 SB2021121011 SB2021121605 and 67 more |
||
| #VU56829 - Improper input validation CVE-2021-29923 |
CWE-20 | Medium | 2.6.8-211.el7, 2.6.8-211.el8, 4.8.3-251.el7, 4.8.3-251.el8 | 22.09.2021 |
SB2021092225 SB2021092226 SB2021100408 and 37 more |
||
| #VU56024 - Resource Management Errors CVE-2021-33198 |
CWE-399 | Medium | 2.6.10-230.el7, 2.6.10-230.el8, 4.8.5-278.el7, 4.8.5-278.el8 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 46 more |
||
| #VU56023 - Missing Authorization CVE-2021-33197 |
CWE-862 | Medium | 2.6.10-230.el7, 2.6.10-230.el8, 4.8.5-278.el7, 4.8.5-278.el8 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 41 more |
||
| #VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-33195 |
CWE-79 | Medium | 2.6.10-230.el7, 2.6.10-230.el8, 4.8.5-278.el7, 4.8.5-278.el8 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 38 more |
||
| #VU55665 - Improper Certificate Validation CVE-2021-34558 |
CWE-295 | Medium | 2.6.8-211.el7, 2.6.8-211.el8, 4.8.5-278.el7, 4.8.5-278.el8 | 09.08.2021 |
SB2021080909 SB2021080912 SB2021081122 and 65 more |
Showing elements 21 - 40 out of 29