Known vulnerabilities in libarrow (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libarrow (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libarrow_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112131 - Permissions, Privileges, and Access Controls CVE-2025-52555 |
CWE-264 | Low | 9.0.0-10.el9cp, 15.0.2-3.el10cp | 03.07.2025 |
SB2025070314 SB2025071898 SB2025072529 and 6 more |
||
| #VU105983 - Resource exhaustion CVE-2025-30204 |
CWE-400 | Medium | 9.0.0-10.el9cp, 15.0.2-3.el10cp | 24.03.2025 |
SB2025032475 SB2025032730 SB2025040333 and 97 more |
||
| #VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-11831 |
CWE-79 | Medium | 9.0.0-10.el9cp, 15.0.2-3.el10cp | 09.01.2024 |
SB2024010997 SB2025021411 SB2025021412 and 17 more |
||
| #VU72319 - Resource exhaustion CVE-2023-25153 |
CWE-400 | Medium | 9.0.0-10.el9cp, 15.0.2-3.el10cp | 16.02.2023 |
SB2023021620 SB2023051934 SB2023060110 and 30 more |