Known vulnerabilities in openshift-kuryr (Red Hat package)
Vendor:
Red Hat Inc.
Software:
openshift-kuryr (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
197
Public exploits:
15
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.13.0-202501071752.p0.g36754b7.assembly.stream.el8
4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202410181711.p0.g8926a29.assembly.stream.el8
4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202410181847.p0.g36754b7.assembly.stream.el8
4.13.0-202404151710.p0.g36754b7.assembly.stream.el8
4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202403201503.p0.g36754b7.assembly.stream.el8
4.14.0-202403201503.p0.g8926a29.assembly.stream.el8
4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202309272140.p0.g8926a29.assembly.stream.el8
4.13.0-202307191602.p0.g36754b7.assembly.stream.el8
4.13.0-202306281017.p0.g5baee73.assembly.stream.el8
4.12.0-202306230041.p0.g31dd228.assembly.stream.el8
4.10.0-202306170106.p0.g8e4df8b.assembly.stream.el8
4.11.0-202306280915.p0.gc732699.assembly.stream.el8
4.12.0-202306140156.p0.g31dd228.assembly.stream.el8
4.13.0-202305171615.p0.g3055dbe.assembly.stream.el8
4.10.0-202305161315.p0.g8e4df8b.assembly.stream.el8
4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
4.11.0-202304070715.p0.g93daed6.assembly.stream.el8
4.11.0-202303240327.p0.g93daed6.assembly.stream.el8
4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8
4.8.0-202110140215.p0.git.15fa4c4.assembly.stream.el8
4.6.0-202107300032.p0.git.0063daa.el8
4.8.0-202107291413.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202103241948.p0.git.2504.add19d0.el8
3.11.394-1.git.1490.16ed375.el7
4.7.0-202101262230.p0.git.2494.cd95ce5.el8
3.11.374-1.git.1478.ef11824.el7
4.5.0-202012221738.p0.git.2004.e3caa5a.el8
4.6.0-202010011649.p0.git.2200.e296ba5.el8
4.3.40-202010141211.p0.git.1641.ff17cdb.el8
4.3.28-202006270952.p0.git.1632.9e3ea83.el8
4.4.0-202006271254.p0.git.1811.c15bfa2.el8
3.11.232-1.git.1.d2cedd4.el7
4.3.0-201911060517.git.1.eea1453.el7
4.3.0-202001152300.git.1.a051bf1.el8
4.12.0-202210261235.p0.g92b9be2.assembly.stream.el8
4.11.0-202211072116.p0.g93daed6.assembly.stream.el8
4.11.0-202208101627.p0.g6952743.assembly.stream.el8
4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
4.10.0-202207192015.p0.ge96efa4.assembly.stream.el8
3.11.715-1.g0c4bf66.el7
3.11.705-1.g0c4bf66.el7
3.11.685-1.g0c4bf66.el7
4.6.0-202202251050.p0.g74cd766.assembly.stream.el8
4.10.0-202202160023.p0.ge77f917.assembly.stream.el8
4.6.0-202201261116.p0.g74cd766.assembly.stream.el8
3.11.634-1.g0c4bf66.el7
4.6.0-202105061806.p0.git.74e6cd2.el8
4.7.0-202201082234.p0.g72de60e.assembly.stream.el8
4.8.0-202112131630.p0.g839864c.assembly.stream.el8
4.6.0-202111041131.p0.git.7c5a4f7.assembly.stream.el8
3.11.569-1.g0c4bf66.el7
4.8.0-202111221627.p0.g43dd2f6.assembly.stream.el8
4.9.0-202111221622.p0.g473fd0c.assembly.stream.el8
4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8
3.11.542-1.git.707a557.el7
4.9.0-202109101042.p0.git.e66f211.assembly.stream.el8
3.11.524-1.git.b234b49.el7
4.6.0-202108202025.p0.git.0063daa.assembly.stream.el8
4.7.0-202107291238.p0.git.c7654fb.assembly.stream.el8
3.11.501-1.git.c33a657.el7
4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8
4.7.0-202106232224.p0.git.c7654fb.el8
4.5.0-202106011407.p0.git.75cc301.el8
3.11.462-1.git.c33a657.el7
4.6.0-202106181055.p0.git.7feb5bd.el8
3.11.452-1.git.c33a657.el7
4.7.0-202105140104.p0.git.8b61936.el8
3.11.420-1.git.1500.afe0076.el7
4.7.0-202105111743.p0.git.36c2cdd.el8
4.7.0-202104250659.p0.git.d49acc4.el8
4.6.0-202103192141.p0.git.2234.cba9525.el8
4.7.0-202103171728.p0.git.2502.8383c08.el8
3.11.404-1.git.1494.91fb403.el7
4.5.0-202012022006.p0.git.2002.19b85d0.el8
4.6.0-202102031810.p0.git.2225.a3ab872.el8
4.4.0-202101082241.p0.git.1821.1a159eb.el8
4.6.0-202101151835.p0.git.2220.40847e5.el8
4.6.0-202012171504.p0.git.2216.1fecf92.el8
3.11.346-1.git.1478.b99caab.el7
4.6.0-202012042155.p0.git.2216.8a6f6a5.el8
4.5.0-202010091010.p0.git.1998.b73d461.el8
3.11.248-1.git.1.f90c804.el7
3.11.161-1.git.1.33697e5.el7
4.3.10-202003300855.git.0.07e6ba6.el8
4.3.25-202006081518.git.1.240b401.el8
4.4.0-202008131757.p0.git.1813.8e0365d.el8
4.2.4-201911042119.git.1.d838b90.el7
4.2.0-201910101431.git.1.e63e8cd.el7
3.11.153-1.git.1.073ef06.el7
4.4.0-202006080017.git.1.855ef1d.el8
3.11.219-1.git.1.717d59f.el7
4.3.1-202002031701.git.1.cfa4a05.el8
4.3.9-202003230116.git.0.9f1e22e.el8
4.2.20-202002140432.git.1.d9a72a5.el7
4.3.3-202002170501.git.1.3b8b4cc.el8
3.11.170-1.git.1.7265da1.el7
4.3.5-202003020117.git.0.237579a.el8
Vulnerabilities (197)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101972 - Security Features CVE-2024-56326 |
CWE-254 | Low | 4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202501071752.p0.g36754b7.assembly.stream.el8 | 27.12.2024 |
SB2024122789 SB2024122790 SB2024122791 and 78 more |
||
| #VU101971 - Security Features CVE-2024-56201 |
CWE-254 | Low | 4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202501071752.p0.g36754b7.assembly.stream.el8 | 27.12.2024 |
SB2024122789 SB2025010203 SB2025010322 and 62 more |
||
| #VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-9675 |
CWE-22 | Low | 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 21.10.2024 |
SB2024102103 SB2024102104 SB2024102107 and 51 more |
||
| #VU98817 - UNIX Symbolic Link (Symlink) Following CVE-2024-9676 |
CWE-61 | Low | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 18.10.2024 |
SB2024101822 SB2024101823 SB2024101824 and 49 more |
||
| #VU98141 - Improper input validation CVE-2024-9341 |
CWE-20 | Low | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8 | 08.10.2024 |
SB2024100842 SB2024100843 SB2024100848 and 44 more |
||
| #VU97965 - Improper Access Control CVE-2024-44082 |
CWE-284 | Low | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8 | 02.10.2024 |
SB2024100260 SB2024100261 SB2024100262 and 10 more |
||
| #VU97217 - Resource exhaustion CVE-2024-34158 |
CWE-400 | Medium | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 76 more |
||
| #VU97216 - Resource exhaustion CVE-2024-34156 |
CWE-400 | Medium | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 143 more |
||
| #VU97215 - Resource exhaustion CVE-2024-34155 |
CWE-400 | Medium | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 81 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202404151710.p0.g36754b7.assembly.stream.el8, 4.14.0-202404151639.p0.g8926a29.assembly.stream.el8 | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU87830 - Missing release of memory after effective lifetime CVE-2024-1394 |
CWE-401 | Medium | 4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202403201503.p0.g36754b7.assembly.stream.el8, 4.14.0-202403201503.p0.g8926a29.assembly.stream.el8, 4.14.0-202404151639.p0.g8926a29.assembly.stream.el8 | 26.03.2024 |
SB2024032646 SB2024032647 SB2024032648 and 54 more |
||
| #VU87616 - Improper Privilege Management CVE-2024-1753 |
CWE-269 | High | 4.13.0-202404151710.p0.g36754b7.assembly.stream.el8 | 19.03.2024 |
SB2024031925 SB2024032051 SB2024032613 and 41 more |
||
| #VU87538 - Resource exhaustion CVE-2024-28180 |
CWE-400 | Medium | 4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202404151710.p0.g36754b7.assembly.stream.el8, 4.14.0-202403201503.p0.g8926a29.assembly.stream.el8 | 14.03.2024 |
SB2024031446 SB2024031447 SB2024031448 and 106 more |
||
| #VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24786 |
CWE-835 | Medium | 4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8 | 11.03.2024 |
SB2024031115 SB2024031435 SB2024031555 and 134 more |
||
| #VU82923 - Allocation of Resources Without Limits or Throttling CVE-2023-3153 |
CWE-770 | Medium | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | 08.11.2023 |
SB2023110861 SB2023110864 SB2023110866 and 2 more |
||
| #VU81426 - Resource exhaustion CVE-2023-37788 |
CWE-400 | Medium | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | 03.10.2023 |
SB2023100334 SB2023100335 SB2023100512 and 11 more |
||
| #VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39319 |
CWE-79 | Medium | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | 08.09.2023 |
SB2023090845 SB2023091146 SB2023091875 and 62 more |
||
| #VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-39318 |
CWE-79 | Medium | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | 08.09.2023 |
SB2023090845 SB2023091146 SB2023091875 and 61 more |
||
| #VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-3978 |
CWE-79 | Low | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | 09.08.2023 |
SB2023080938 SB2023081013 SB20230821167 and 54 more |
||
| #VU78290 - Use After Free CVE-2023-29824 |
CWE-416 | Low | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | 16.07.2023 |
SB2023071614 SB2023071617 SB2023072554 and 6 more |
Showing elements 1 - 20 out of 197