Known vulnerabilities in libldb (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libldb (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libldb_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
11
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
4.23.5-10.el9_8
4.23.5-8.el9_8
4.22.4-20.el9_7
4.22.4-18.el9_7
4.22.4-12.el9_7
4.22.4-6.el9_7
4.21.3-14.el9_6
2.8.0-1.el9
4.21.3-7.el9_6
1.1.13-3.el6_7.1
2.5.2-1.el9
2.5.2-2.el8
1.3.4-2.el7_6
1.4.2-2.el7_7
2.0.7-4.el8_2
1.5.4-3.el8_1
2.1.3-3.el8_3
1.5.4-2.el7_9
2.1.3-2.el8
1.1.29-1.el6rhs
1.1.20-3.el6rhs
1.1.20-3.el7rhgs
1.1.24-1.el6rhs
1.1.24-1.el7rhgs
1.1.25-1.el7_1
1.1.25-2.el6_2
1.1.25-2.el6_4
1.1.25-2.el6_5
1.1.25-2.el6_6
1.3.4-1.el7
1.2.2-3.el7
1.2.2-1.el7
1.1.29-1.el7
1.1.26-1.el7
1.1.24-1.el7
1.1.20-3.el7
1.1.20-1.el7
1.1.25-2.el6_7
1.1.13-3.el6_7
1.2.2-3.el6
1.1.29-1.el6
1.1.26-1.el6
1.1.24-1.el6
1.1.20-3.el6
1.1.20-1.el6
1.1.13-3.el6
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65827 - Use After Free CVE-2022-32746 |
CWE-416 | Low | 2.5.2-1.el9, 2.5.2-2.el8 | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 30 more |
||
| #VU51701 - Out-of-bounds read CVE-2021-20277 |
CWE-125 | Medium | 1.3.4-2.el7_6, 1.4.2-2.el7_7, 1.5.4-2.el7_9, 1.5.4-3.el8_1, 2.0.7-4.el8_2, 2.1.3-3.el8_3 | 24.03.2021 |
SB2021032411 SB2021040615 SB2021040625 and 24 more |
||
| #VU29483 - NULL Pointer Dereference CVE-2020-10730 |
CWE-476 | Medium | 2.1.3-2.el8 | 02.07.2020 |
SB2020070224 SB2020071805 SB2020072104 and 12 more |
||
| #VU241 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2118 |
CWE-300 | High | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 25 more |
||
| #VU240 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2115 |
CWE-300 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 24 more |
||
| #VU239 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2114 |
CWE-300 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 11 more |
||
| #VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2113 |
CWE-300 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 16 more |
||
| #VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2112 |
CWE-300 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 24 more |
||
| #VU236 - Authentication Bypass by Spoofing CVE-2016-2111 |
CWE-290 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 25 more |
||
| #VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2016-2110 |
CWE-300 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 25 more |
||
| #VU234 - Resource exhaustion CVE-2015-5370 |
CWE-400 | Medium | 1.1.24-1.el6rhs, 1.1.24-1.el7rhgs, 1.1.25-1.el7_1, 1.1.25-2.el6_2, 1.1.25-2.el6_4, 1.1.25-2.el6_5, 1.1.25-2.el6_6 | 29.07.2016 |
SB2016052501 SB2016051803 SB2016050401 and 22 more |