Known vulnerabilities in openshift-ansible (Red Hat package) - page 4

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 223
Public exploits: 17
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 223 known vulnerabilities: 18 high, 139 medium, 66 low Critical High Medium Low

Vulnerabilities (223)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99623 - Resource exhaustion
CVE-2024-49769
CWE-400 Medium
No
No
4.17.0-202411120704.p0.g5c737da.assembly.stream.el8, 4.17.0-202411120704.p0.g5c737da.assembly.stream.el9 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99613 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-49768
CWE-444 Medium
No
No
4.17.0-202411120704.p0.g5c737da.assembly.stream.el8, 4.17.0-202411120704.p0.g5c737da.assembly.stream.el9 01.11.2024 SB2024110154
SB2024110156
SB2024110157
and 23 more
#VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-9675
CWE-22 Low
No
No
4.13.0-202410181847.p0.g1397e80.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el9, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el8, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el9 21.10.2024 SB2024102103
SB2024102104
SB2024102107
and 51 more
#VU98817 - UNIX Symbolic Link (Symlink) Following
CVE-2024-9676
CWE-61 Low
No
No
4.12.0-202410181935.p0.gd97dd6f.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el9, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el8, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el9, 4.15.0-202410181710.p0.g41f6580.assembly.stream.el8, 4.15.0-202410181710.p0.g41f6580.assembly.stream.el9 18.10.2024 SB2024101822
SB2024101823
SB2024101824
and 54 more
#VU97216 - Resource exhaustion
CVE-2024-34156
CWE-400 Medium
No
No
4.12.0-202410181935.p0.gd97dd6f.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el9, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el8, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el9, 4.15.0-202410181710.p0.g41f6580.assembly.stream.el8, 4.15.0-202410181710.p0.g41f6580.assembly.stream.el9, 4.16.0-202410172045.p0.g06f35b9.assembly.stream.el8, 4.16.0-202410172045.p0.g06f35b9.assembly.stream.el9, 4.17.0-202410111511.p0.g7fe7411.assembly.stream.el8, 4.17.0-202410111511.p0.g7fe7411.assembly.stream.el9 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU73227 - Use of Insufficiently Random Values
CVE-2019-11840
CWE-330 Medium
No
No
3.11.374-1.git.0.92f5956.el7 10.03.2023 SB2019050924
SB2023031017
SB2023031018
and 2 more
#VU60104 - Improper input validation
CVE-2020-8554
CWE-20 Medium
No
No
3.11.374-1.git.0.92f5956.el7 27.01.2022 SB2022012749
SB2022012750
SB2022042257
and 2 more
#VU56245 - Improper input validation
CVE-2021-25735
CWE-20 Medium
Available
No
4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 01.09.2021 SB2021090125
SB2021090126
SB2022083132
and 4 more
#VU53436 - Exposure of sensitive information to an unauthorized actor
CVE-2021-25737
CWE-200 Low
No
No
4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 24.05.2021 SB2021052409
SB2021060911
SB2021090126
and 4 more
#VU53152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21648
CWE-79 Low
No
No
4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 12.05.2021 SB2021051209
SB2021090126
SB2022083132
and 1 more
#VU51994 - Improper Authentication
CVE-2021-21640
CWE-287 Low
No
No
4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51993 - Improper input validation
CVE-2021-21639
CWE-20 Low
No
No
4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 08.04.2021 SB2021040814
SB2021052527
SB2021062509
and 3 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163
CWE-200 Medium
No
No
4.7.0-202105111743.p0.git.e1b19c2.el7 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
4.7.0-202105111743.p0.git.e1b19c2.el7 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU51595 - Permissions, Privileges, and Access Controls
CVE-2021-21623
CWE-264 Medium
No
No
4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 22.03.2021 SB2021032207
SB2021090126
SB2022083132
and 1 more
#VU50957 - Integer overflow
CVE-2020-27813
CWE-190 Medium
No
No
3.11.404-1.git.0.d161108.el7 25.02.2021 SB2020120224
SB2021052527
SB2023070702
and 3 more
#VU48480 - Improper input validation
CVE-2020-28362
CWE-20 Medium
No
No
4.7.0-202104250659.p0.git.e1b19c2.el7, 4.7.0-202105111743.p0.git.e1b19c2.el7 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137
CWE-93 Medium
No
No
3.11.374-1.git.0.92f5956.el7 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845
CWE-835 Medium
No
No
4.4.0-202011122017.p0.git.0.2755c9b.el7, 4.5.0-202010081312.p0.git.0.401534e.el7, 4.5.0-202011121956.p0.git.0.7093c82.el7, 4.6.0-202103192141.p0.git.0.d1b612b.el7, 4.7.0-202104250659.p0.git.e1b19c2.el7 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586
CWE-362 Medium
No
No
4.4.0-202011122017.p0.git.0.2755c9b.el7, 4.5.0-202010081312.p0.git.0.401534e.el7, 4.5.0-202011121956.p0.git.0.7093c82.el7, 4.6.0-202103192141.p0.git.0.d1b612b.el7, 4.7.0-202104250659.p0.git.e1b19c2.el7 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more


Showing elements 61 - 80 out of 223