Known vulnerabilities in libmetalink (Red Hat package)

Vendor: Red Hat Inc.
Software: libmetalink (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:libmetalink_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 4
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libmetalink (Red Hat package) libmetalink (Red Hat package) is affected by 4 known vulnerabilities: 1 medium, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60007 - Improper input validation
CVE-2021-4034		 CWE-20 Medium
Available
Exploited
 0.1.3-7.el8 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU59952 - Heap-based Buffer Overflow
CVE-2021-45417		 CWE-122 Low
No
No
 0.1.3-7.el8 24.01.2022 SB2022012407
SB2022012436
SB2022020713
and 22 more
#VU59812 - Permissions, Privileges, and Access Controls
CVE-2021-4155		 CWE-264 Low
No
No
 0.1.3-7.el8 19.01.2022 SB2022011910
SB2022011932
SB2022011937
and 54 more
#VU59695 - Integer overflow
CVE-2022-0185		 CWE-190 Low
Available
Exploited
 0.1.3-7.el8 18.01.2022 SB2022011820
SB2022011932
SB2022011937
and 33 more