Known vulnerabilities in openshift-kuryr (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
openshift-kuryr (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
197
Public exploits:
15
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.13.0-202501071752.p0.g36754b7.assembly.stream.el8
4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202410181711.p0.g8926a29.assembly.stream.el8
4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202410181847.p0.g36754b7.assembly.stream.el8
4.13.0-202404151710.p0.g36754b7.assembly.stream.el8
4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202403201503.p0.g36754b7.assembly.stream.el8
4.14.0-202403201503.p0.g8926a29.assembly.stream.el8
4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202309272140.p0.g8926a29.assembly.stream.el8
4.13.0-202307191602.p0.g36754b7.assembly.stream.el8
4.13.0-202306281017.p0.g5baee73.assembly.stream.el8
4.12.0-202306230041.p0.g31dd228.assembly.stream.el8
4.10.0-202306170106.p0.g8e4df8b.assembly.stream.el8
4.11.0-202306280915.p0.gc732699.assembly.stream.el8
4.12.0-202306140156.p0.g31dd228.assembly.stream.el8
4.13.0-202305171615.p0.g3055dbe.assembly.stream.el8
4.10.0-202305161315.p0.g8e4df8b.assembly.stream.el8
4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
4.11.0-202304070715.p0.g93daed6.assembly.stream.el8
4.11.0-202303240327.p0.g93daed6.assembly.stream.el8
4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8
4.8.0-202110140215.p0.git.15fa4c4.assembly.stream.el8
4.6.0-202107300032.p0.git.0063daa.el8
4.8.0-202107291413.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202103241948.p0.git.2504.add19d0.el8
3.11.394-1.git.1490.16ed375.el7
4.7.0-202101262230.p0.git.2494.cd95ce5.el8
3.11.374-1.git.1478.ef11824.el7
4.5.0-202012221738.p0.git.2004.e3caa5a.el8
4.6.0-202010011649.p0.git.2200.e296ba5.el8
4.3.40-202010141211.p0.git.1641.ff17cdb.el8
4.3.28-202006270952.p0.git.1632.9e3ea83.el8
4.4.0-202006271254.p0.git.1811.c15bfa2.el8
3.11.232-1.git.1.d2cedd4.el7
4.3.0-201911060517.git.1.eea1453.el7
4.3.0-202001152300.git.1.a051bf1.el8
4.12.0-202210261235.p0.g92b9be2.assembly.stream.el8
4.11.0-202211072116.p0.g93daed6.assembly.stream.el8
4.11.0-202208101627.p0.g6952743.assembly.stream.el8
4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
4.10.0-202207192015.p0.ge96efa4.assembly.stream.el8
3.11.715-1.g0c4bf66.el7
3.11.705-1.g0c4bf66.el7
3.11.685-1.g0c4bf66.el7
4.6.0-202202251050.p0.g74cd766.assembly.stream.el8
4.10.0-202202160023.p0.ge77f917.assembly.stream.el8
4.6.0-202201261116.p0.g74cd766.assembly.stream.el8
3.11.634-1.g0c4bf66.el7
4.6.0-202105061806.p0.git.74e6cd2.el8
4.7.0-202201082234.p0.g72de60e.assembly.stream.el8
4.8.0-202112131630.p0.g839864c.assembly.stream.el8
4.6.0-202111041131.p0.git.7c5a4f7.assembly.stream.el8
3.11.569-1.g0c4bf66.el7
4.8.0-202111221627.p0.g43dd2f6.assembly.stream.el8
4.9.0-202111221622.p0.g473fd0c.assembly.stream.el8
4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8
3.11.542-1.git.707a557.el7
4.9.0-202109101042.p0.git.e66f211.assembly.stream.el8
3.11.524-1.git.b234b49.el7
4.6.0-202108202025.p0.git.0063daa.assembly.stream.el8
4.7.0-202107291238.p0.git.c7654fb.assembly.stream.el8
3.11.501-1.git.c33a657.el7
4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8
4.7.0-202106232224.p0.git.c7654fb.el8
4.5.0-202106011407.p0.git.75cc301.el8
3.11.462-1.git.c33a657.el7
4.6.0-202106181055.p0.git.7feb5bd.el8
3.11.452-1.git.c33a657.el7
4.7.0-202105140104.p0.git.8b61936.el8
3.11.420-1.git.1500.afe0076.el7
4.7.0-202105111743.p0.git.36c2cdd.el8
4.7.0-202104250659.p0.git.d49acc4.el8
4.6.0-202103192141.p0.git.2234.cba9525.el8
4.7.0-202103171728.p0.git.2502.8383c08.el8
3.11.404-1.git.1494.91fb403.el7
4.5.0-202012022006.p0.git.2002.19b85d0.el8
4.6.0-202102031810.p0.git.2225.a3ab872.el8
4.4.0-202101082241.p0.git.1821.1a159eb.el8
4.6.0-202101151835.p0.git.2220.40847e5.el8
4.6.0-202012171504.p0.git.2216.1fecf92.el8
3.11.346-1.git.1478.b99caab.el7
4.6.0-202012042155.p0.git.2216.8a6f6a5.el8
4.5.0-202010091010.p0.git.1998.b73d461.el8
3.11.248-1.git.1.f90c804.el7
3.11.161-1.git.1.33697e5.el7
4.3.10-202003300855.git.0.07e6ba6.el8
4.3.25-202006081518.git.1.240b401.el8
4.4.0-202008131757.p0.git.1813.8e0365d.el8
4.2.4-201911042119.git.1.d838b90.el7
4.2.0-201910101431.git.1.e63e8cd.el7
3.11.153-1.git.1.073ef06.el7
4.4.0-202006080017.git.1.855ef1d.el8
3.11.219-1.git.1.717d59f.el7
4.3.1-202002031701.git.1.cfa4a05.el8
4.3.9-202003230116.git.0.9f1e22e.el8
4.2.20-202002140432.git.1.d9a72a5.el7
4.3.3-202002170501.git.1.3b8b4cc.el8
3.11.170-1.git.1.7265da1.el7
4.3.5-202003020117.git.0.237579a.el8
Vulnerabilities (197)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 4.10.0-202207192015.p0.ge96efa4.assembly.stream.el8, 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8, 4.11.0-202306280915.p0.gc732699.assembly.stream.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU64008 - Resource exhaustion CVE-2022-1708 |
CWE-400 | Medium | 3.11.715-1.g0c4bf66.el7 | 07.06.2022 |
SB2022060707 SB2022061334 SB2022061627 and 15 more |
||
| #VU63493 - Improper Access Control CVE-2022-1706 |
CWE-284 | Low | 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 20.05.2022 |
SB2022052015 SB2022071162 SB2022071163 and 9 more |
||
| #VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162 |
CWE-264 | Medium | 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 12.05.2022 |
SB2022051205 SB2022062435 SB2022071158 and 32 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |
||
| #VU61227 - Incorrect Regular Expression CVE-2022-24921 |
CWE-185 | Medium | 4.10.0-202207192015.p0.ge96efa4.assembly.stream.el8, 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8 | 10.03.2022 |
SB2022031004 SB2022031005 SB2022041208 and 41 more |
||
| #VU60643 - UNIX Symbolic Link (Symlink) Following CVE-2022-25179 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021608 SB2022032826 SB2022032910 and 4 more |
||
| #VU60642 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25175 |
CWE-78 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021608 SB2022032826 SB2022032910 and 4 more |
||
| #VU60641 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25183 |
CWE-94 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60640 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25182 |
CWE-94 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60639 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25181 |
CWE-94 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60638 - UNIX Symbolic Link (Symlink) Following CVE-2022-25178 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60637 - UNIX Symbolic Link (Symlink) Following CVE-2022-25177 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60636 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25174 |
CWE-78 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021607 SB2022032826 SB2022032910 and 4 more |
||
| #VU60635 - Exposure of sensitive information to an unauthorized actor CVE-2022-25180 |
CWE-200 | Low | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021606 SB2022032826 SB2022032910 and 4 more |
||
| #VU60634 - UNIX Symbolic Link (Symlink) Following CVE-2022-25176 |
CWE-61 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021606 SB2022032826 SB2022032910 and 4 more |
||
| #VU60633 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-25173 |
CWE-78 | Medium | 3.11.685-1.g0c4bf66.el7 | 16.02.2022 |
SB2022021606 SB2022032826 SB2022032910 and 4 more |
Showing elements 61 - 80 out of 197