Known vulnerabilities in openshift-ansible (Red Hat package) - page 5

Software CPE: cpe:2.3:o:red_hat:openshift-ansible_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 222
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-ansible (Red Hat package) openshift-ansible (Red Hat package) is affected by 222 known vulnerabilities: 18 high, 138 medium, 66 low Critical High Medium Low

Vulnerabilities (222)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74843 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-0778
CWE-367 Medium
No
No
4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9 11.04.2023 SB2023041130
SB2023041131
SB2023051738
and 10 more
#VU74481 - Improper Access Control
CVE-2023-0229
CWE-284 Low
No
No
4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9 05.04.2023 SB2023040518
SB2023040543
SB2023051810
and 3 more
#VU72339 - Resource exhaustion
CVE-2023-25577
CWE-400 Medium
No
No
4.11.0-202304070715.p0.gdf73941.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU72334 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-25725
CWE-444 Medium
No
No
4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9 16.02.2023 SB2023021659
SB2023021662
SB2023021663
and 22 more
#VU71431 - Improper input validation
CVE-2023-0056
CWE-20 Medium
No
No
4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9 23.01.2023 SB2023012331
SB2023012332
SB2023012641
and 20 more
#VU70537 - Out-of-bounds read
CVE-2022-46149
CWE-125 Medium
No
No
4.12.0-202303211955.p0.gab53575.assembly.stream.el8 29.12.2022 SB2022122902
SB2022122903
SB2023032960
and 8 more
#VU70478 - Improper input validation
CVE-2022-4318
CWE-20 Low
No
No
4.11.0-202303240327.p0.gdf73941.assembly.stream.el8 23.12.2022 SB2022122317
SB2023030858
SB2023040489
and 3 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
4.10.0-202302072053.p0.g72c7be6.assembly.stream.el7, 4.10.0-202302072053.p0.g72c7be6.assembly.stream.el8 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68299 - Incorrect Permission Assignment for Critical Resource
CVE-2022-0532
CWE-732 Medium
No
No
4.9.0-202203081819.p0.ge266b64.assembly.stream.el7, 4.10.0-202202110258.p0.g25af5a6.assembly.stream.el7 13.10.2022 SB2022101333
SB2022101334
SB2022101335
and 4 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
4.11.0-202208111716.p0.gdf73941.assembly.stream.el8, 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189
CWE-20 Medium
No
No
4.11.0-202211072116.p0.gdf73941.assembly.stream.el8 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU64604 - Observable discrepancy
CVE-2022-34174
CWE-203 Medium
No
No
4.10.0-202302072053.p0.g72c7be6.assembly.stream.el7, 4.10.0-202302072053.p0.g72c7be6.assembly.stream.el8 23.06.2022 SB2022062312
SB2023011328
SB2023021602
and 5 more
#VU64269 - Integer overflow
CVE-2022-28327
CWE-190 Low
No
No
4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el7, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8, 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64266 - Buffer overflow
CVE-2022-24675
CWE-120 Low
No
No
4.10.0-202207192015.p0.g1e68436.assembly.stream.el7, 4.10.0-202207192015.p0.g1e68436.assembly.stream.el8, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el7, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8, 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8 14.06.2022 SB2022041004
SB2022061422
SB2022061511
and 88 more
#VU63493 - Improper Access Control
CVE-2022-1706
CWE-284 Low
No
No
4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 20.05.2022 SB2022052015
SB2022071162
SB2022071163
and 9 more
#VU63090 - Permissions, Privileges, and Access Controls
CVE-2022-29162
CWE-264 Medium
No
No
4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 12.05.2022 SB2022051205
SB2022062435
SB2022071158
and 32 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191
CWE-327 Medium
No
No
4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU62037 - Incorrect Authorization
CVE-2022-23773
CWE-863 Low
Available
No
4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el7, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806
CWE-252 Medium
No
No
4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el7, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
4.11.0-202206240216.p0.g9de1722.assembly.stream.el8 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 110 more


Showing elements 81 - 100 out of 222