Known vulnerabilities in openshift-kuryr (Red Hat package)

Vendor: Red Hat Inc.

Software: openshift-kuryr (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 198

Public exploits: 15

Known exploited (KEV): 2

Breakdown by Severity Chart

Vulnerabilities (198)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU101972 - Security Features CVE-2024-56326	CWE-254	Low	No	No	4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202501071752.p0.g36754b7.assembly.stream.el8	27.12.2024	SB2024122789 SB2024122790 SB2024122791 and 78 more
#VU101971 - Security Features CVE-2024-56201	CWE-254	Low	No	No	4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202501071752.p0.g36754b7.assembly.stream.el8	27.12.2024	SB2024122789 SB2025010203 SB2025010322 and 62 more
#VU69291 - Incorrect Authorization CVE-2022-2990	CWE-863	Low	No	No	4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8	14.11.2022	SB2022111431 SB2022111435 SB2022111439 and 14 more
#VU26474 - Uncontrolled Memory Allocation CVE-2020-8552	CWE-789	Medium	No	No	4.3.9-202003230116.git.0.9f1e22e.el8	31.03.2020	SB2020033111 SB2020040174 SB2020042251 and 6 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-11236	CWE-93	Medium	Available	No	4.3.28-202006270952.p0.git.1632.9e3ea83.el8, 4.4.0-202006271254.p0.git.1811.c15bfa2.el8	26.03.2020	SB2020032626 SB2020031827 SB2019091504 and 38 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2163	CWE-79	Low	No	No	4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8	26.03.2020	SB2020032622 SB2020032668 SB2020061738 and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2162	CWE-79	Low	No	No	4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8	26.03.2020	SB2020032622 SB2020032667 SB2020061738 and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2161	CWE-79	Low	No	No	4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8	26.03.2020	SB2020032622 SB2020032662 SB2020061738 and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF) CVE-2020-2160	CWE-352	Low	No	No	4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8	26.03.2020	SB2020032622 SB2020032661 SB2020061738 and 1 more
#VU25458 - Heap-based Buffer Overflow CVE-2020-7039	CWE-122	Low	No	No	4.3.1-202002031701.git.1.cfa4a05.el8	19.02.2020	SB2020021912 SB2020031117 SB2020031053 and 26 more
#VU25457 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-7211	CWE-22	Low	No	No	4.3.1-202002031701.git.1.cfa4a05.el8	19.02.2020	SB2020021912 SB2020021193
#VU24764 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-2105	CWE-451	Low	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24763 - Exposure of sensitive information to an unauthorized actor CVE-2020-2104	CWE-200	Low	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24762 - Exposure of sensitive information to an unauthorized actor CVE-2020-2103	CWE-200	Low	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24761 - Cryptographic Issues CVE-2020-2102	CWE-310	Medium	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24760 - Exposure of sensitive information to an unauthorized actor CVE-2020-2101	CWE-200	Medium	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24759 - Resource Management Errors CVE-2020-2100	CWE-399	Medium	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013005 SB20200310153
#VU24758 - Improper Authentication CVE-2020-2099	CWE-287	High	No	No	4.3.5-202003020117.git.0.237579a.el8	30.01.2020	SB2020013004 SB20200310153
#VU21780 - Improper Certificate Validation CVE-2019-11324	CWE-295	Medium	Available	No	4.3.28-202006270952.p0.git.1632.9e3ea83.el8, 4.4.0-202006271254.p0.git.1811.c15bfa2.el8	15.10.2019	SB2019041823 SB2020031827 SB2019091504 and 20 more
#VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-10392	CWE-78	Medium	No	No	4.2.20-202002140432.git.1.d9a72a5.el7, 4.3.3-202002170501.git.1.3b8b4cc.el8	16.09.2019	SB2019091607 SB2020061842 SB2020022451 and 2 more

Showing elements 1 - 20 out of 198

Known vulnerabilities in openshift-kuryr (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (198)

Please verify you're human