Known vulnerabilities in mcg (Red Hat package)

Vendor: Red Hat Inc.
Software: mcg (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:mcg_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mcg (Red Hat package) mcg (Red Hat package) is affected by 16 known vulnerabilities: 12 medium, 4 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 5.9.0-28.61dcf87.5.9.el8 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU64805 - Improper input validation
CVE-2021-43565		 CWE-20 Medium
No
No
 5.10.0-72.el8 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 5.11.0-22.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675		 CWE-120 Low
No
No
 5.11.0-22.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 5.11.0-22.el8 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU59042 - Resource exhaustion
CVE-2021-44717		 CWE-400 Medium
No
No
 5.10.0-72.el8 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 5.10.0-72.el8 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 5.9.0-28.61dcf87.5.9.el8 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more
#VU56023 - Missing Authorization
CVE-2021-33197		 CWE-862 Medium
No
No
 5.9.0-28.61dcf87.5.9.el8 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 41 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195		 CWE-79 Medium
No
No
 5.9.0-28.61dcf87.5.9.el8 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221		 CWE-362 Medium
No
No
 5.10.0-72.el8 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 5.9.0-28.61dcf87.5.9.el8 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845		 CWE-835 Medium
No
No
 5.6.0-39.2279a46.5.6.el8 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586		 CWE-362 Medium
No
No
 5.6.0-39.2279a46.5.6.el8 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more
#VU34248 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-14040		 CWE-835 Medium
No
No
 5.6.0-39.2279a46.5.6.el8 17.06.2020 SB2020061731
SB2020100906
SB2020102814
and 25 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 5.9.0-28.61dcf87.5.9.el8 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more