Known vulnerabilities in machine-config-daemon (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: machine-config-daemon (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:machine-config-daemon_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 47
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting machine-config-daemon (Red Hat package) machine-config-daemon (Red Hat package) is affected by 47 known vulnerabilities: 2 high, 20 medium, 25 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103955 - Unprotected Alternate Channel
CVE-2020-8558		 CWE-420 Medium
No
No
 4.4.0-202007092124.p0.git.2349.08d34d1.el8, 4.5.0-202007012112.p0.git.2527.d12c3da.el8 13.02.2025 SB2025021315
SB2025021320
SB2020071327
and 2 more
#VU69447 - Reachable Assertion
CVE-2020-9283		 CWE-617 Medium
Available
No
 4.3.30-202007230708.p0.git.2188.9f34d7f.el8 21.11.2022 SB2020022039
SB2022112104
SB2023090418
and 6 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 4.5.0-202010012007.p0.git.2570.fc7c941.el8, 4.5.0-202012050338.p0.git.2581.e7a62a7.el8 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586		 CWE-362 Medium
No
No
 4.5.0-202010012007.p0.git.2570.fc7c941.el8, 4.5.0-202012050338.p0.git.2581.e7a62a7.el8 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more
#VU30129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2223		 CWE-79 Low
No
No
 4.4.0-202008130707.p0.git.2357.47d462a.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071911
and 2 more
#VU30128 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2222		 CWE-79 Low
No
No
 4.4.0-202008130707.p0.git.2357.47d462a.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071910
and 2 more
#VU30127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2221		 CWE-79 Low
No
No
 4.4.0-202008130707.p0.git.2357.47d462a.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071909
and 2 more
#VU30126 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2220		 CWE-79 Low
No
No
 4.4.0-202008130707.p0.git.2357.47d462a.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071908
and 2 more
#VU30318 - Resource exhaustion
CVE-2019-11254		 CWE-400 Medium
No
No
 4.5.0-202007012112.p0.git.2527.d12c3da.el8 01.04.2020 SB2020040177
SB2020061975
SB2023021634
and 6 more
#VU26474 - Uncontrolled Memory Allocation
CVE-2020-8552		 CWE-789 Medium
No
No
 4.3.9-202003230116.git.0.26e7ac9.el8 31.03.2020 SB2020033111
SB2020040174
SB2020042251
and 6 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-11236		 CWE-93 Medium
Available
No
 4.3.28-202006270952.p0.git.2178.08d8005.el8, 4.4.0-202006271254.p0.git.2337.29601a9.el8 26.03.2020 SB2020032626
SB2020031827
SB2019091504
and 36 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2163		 CWE-79 Low
No
No
 4.3.25-202006081518.git.1.478b31a.el8, 4.4.0-202006080017.git.1.32e0736.el8 26.03.2020 SB2020032622
SB2020032668
SB2020061738
and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2162		 CWE-79 Low
No
No
 4.3.25-202006081518.git.1.478b31a.el8, 4.4.0-202006080017.git.1.32e0736.el8 26.03.2020 SB2020032622
SB2020032667
SB2020061738
and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2161		 CWE-79 Low
No
No
 4.3.25-202006081518.git.1.478b31a.el8, 4.4.0-202006080017.git.1.32e0736.el8 26.03.2020 SB2020032622
SB2020032662
SB2020061738
and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF)
CVE-2020-2160		 CWE-352 Low
No
No
 4.3.25-202006081518.git.1.478b31a.el8, 4.4.0-202006080017.git.1.32e0736.el8 26.03.2020 SB2020032622
SB2020032661
SB2020061738
and 1 more
#VU25501 - Use After Free
CVE-2020-8945		 CWE-416 High
No
No
 4.3.10-202003300415.git.0.56d6ae0.el8, 4.4.0-202007092124.p0.git.2349.08d34d1.el8, 4.5.0-202007012112.p0.git.2527.d12c3da.el8 21.02.2020 SB2020022110
SB2020031116
SB2020031126
and 23 more
#VU24760 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2101		 CWE-200 Medium
No
No
 4.3.5-202003020117.git.0.61e0e48.el8 30.01.2020 SB2020013005
SB20200310153
#VU24759 - Resource Management Errors
CVE-2020-2100		 CWE-399 Medium
No
No
 4.3.5-202003020117.git.0.61e0e48.el8 30.01.2020 SB2020013005
SB20200310153
#VU24758 - Improper Authentication
CVE-2020-2099		 CWE-287 High
No
No
 4.3.5-202003020117.git.0.61e0e48.el8 30.01.2020 SB2020013004
SB20200310153
#VU21780 - Improper Certificate Validation
CVE-2019-11324		 CWE-295 Medium
Available
No
 4.3.28-202006270952.p0.git.2178.08d8005.el8, 4.4.0-202006271254.p0.git.2337.29601a9.el8 15.10.2019 SB2019041823
SB2020031827
SB2019091504
and 19 more


Showing elements 21 - 40 out of 47