Known vulnerabilities in openshift-kuryr (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
openshift-kuryr (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
198
Public exploits:
15
Known exploited (KEV):
2
Breakdown by Severity Chart
4.12.0-202610242309.p2.g8fd2f8b.assembly.stream.el8
4.13.0-202609251156.p2.g36754b7.assembly.stream.el8
4.13.0-202501071752.p0.g36754b7.assembly.stream.el8
4.12.0-202501071748.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202410181711.p0.g8926a29.assembly.stream.el8
4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202410181847.p0.g36754b7.assembly.stream.el8
4.13.0-202404151710.p0.g36754b7.assembly.stream.el8
4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8
4.13.0-202403201503.p0.g36754b7.assembly.stream.el8
4.14.0-202403201503.p0.g8926a29.assembly.stream.el8
4.12.0-202403201504.p0.g8fd2f8b.assembly.stream.el8
4.14.0-202309272140.p0.g8926a29.assembly.stream.el8
4.13.0-202307191602.p0.g36754b7.assembly.stream.el8
4.13.0-202306281017.p0.g5baee73.assembly.stream.el8
4.12.0-202306230041.p0.g31dd228.assembly.stream.el8
4.10.0-202306170106.p0.g8e4df8b.assembly.stream.el8
4.11.0-202306280915.p0.gc732699.assembly.stream.el8
4.12.0-202306140156.p0.g31dd228.assembly.stream.el8
4.13.0-202305171615.p0.g3055dbe.assembly.stream.el8
4.10.0-202305161315.p0.g8e4df8b.assembly.stream.el8
4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
4.11.0-202304070715.p0.g93daed6.assembly.stream.el8
4.11.0-202303240327.p0.g93daed6.assembly.stream.el8
4.10.0-202302072053.p0.gd4f4d9a.assembly.stream.el8
4.8.0-202110140215.p0.git.15fa4c4.assembly.stream.el8
4.6.0-202107300032.p0.git.0063daa.el8
4.8.0-202107291413.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202103241948.p0.git.2504.add19d0.el8
3.11.394-1.git.1490.16ed375.el7
4.7.0-202101262230.p0.git.2494.cd95ce5.el8
3.11.374-1.git.1478.ef11824.el7
4.5.0-202012221738.p0.git.2004.e3caa5a.el8
4.6.0-202010011649.p0.git.2200.e296ba5.el8
4.3.40-202010141211.p0.git.1641.ff17cdb.el8
4.3.28-202006270952.p0.git.1632.9e3ea83.el8
4.4.0-202006271254.p0.git.1811.c15bfa2.el8
3.11.232-1.git.1.d2cedd4.el7
4.3.0-201911060517.git.1.eea1453.el7
4.3.0-202001152300.git.1.a051bf1.el8
4.12.0-202210261235.p0.g92b9be2.assembly.stream.el8
4.11.0-202211072116.p0.g93daed6.assembly.stream.el8
4.11.0-202208101627.p0.g6952743.assembly.stream.el8
4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
4.10.0-202207192015.p0.ge96efa4.assembly.stream.el8
3.11.715-1.g0c4bf66.el7
3.11.705-1.g0c4bf66.el7
3.11.685-1.g0c4bf66.el7
4.6.0-202202251050.p0.g74cd766.assembly.stream.el8
4.10.0-202202160023.p0.ge77f917.assembly.stream.el8
4.6.0-202201261116.p0.g74cd766.assembly.stream.el8
3.11.634-1.g0c4bf66.el7
4.6.0-202105061806.p0.git.74e6cd2.el8
4.7.0-202201082234.p0.g72de60e.assembly.stream.el8
4.8.0-202112131630.p0.g839864c.assembly.stream.el8
4.6.0-202111041131.p0.git.7c5a4f7.assembly.stream.el8
3.11.569-1.g0c4bf66.el7
4.8.0-202111221627.p0.g43dd2f6.assembly.stream.el8
4.9.0-202111221622.p0.g473fd0c.assembly.stream.el8
4.9.0-202110281423.p0.git.4595a4e.assembly.stream.el8
3.11.542-1.git.707a557.el7
4.9.0-202109101042.p0.git.e66f211.assembly.stream.el8
3.11.524-1.git.b234b49.el7
4.6.0-202108202025.p0.git.0063daa.assembly.stream.el8
4.7.0-202107291238.p0.git.c7654fb.assembly.stream.el8
3.11.501-1.git.c33a657.el7
4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8
4.7.0-202106232224.p0.git.c7654fb.el8
4.5.0-202106011407.p0.git.75cc301.el8
3.11.462-1.git.c33a657.el7
4.6.0-202106181055.p0.git.7feb5bd.el8
3.11.452-1.git.c33a657.el7
4.7.0-202105140104.p0.git.8b61936.el8
3.11.420-1.git.1500.afe0076.el7
4.7.0-202105111743.p0.git.36c2cdd.el8
4.7.0-202104250659.p0.git.d49acc4.el8
4.6.0-202103192141.p0.git.2234.cba9525.el8
4.7.0-202103171728.p0.git.2502.8383c08.el8
3.11.404-1.git.1494.91fb403.el7
4.5.0-202012022006.p0.git.2002.19b85d0.el8
4.6.0-202102031810.p0.git.2225.a3ab872.el8
4.4.0-202101082241.p0.git.1821.1a159eb.el8
4.6.0-202101151835.p0.git.2220.40847e5.el8
4.6.0-202012171504.p0.git.2216.1fecf92.el8
3.11.346-1.git.1478.b99caab.el7
4.6.0-202012042155.p0.git.2216.8a6f6a5.el8
4.5.0-202010091010.p0.git.1998.b73d461.el8
3.11.248-1.git.1.f90c804.el7
3.11.161-1.git.1.33697e5.el7
4.3.10-202003300855.git.0.07e6ba6.el8
4.3.25-202006081518.git.1.240b401.el8
4.4.0-202008131757.p0.git.1813.8e0365d.el8
4.2.4-201911042119.git.1.d838b90.el7
4.2.0-201910101431.git.1.e63e8cd.el7
3.11.153-1.git.1.073ef06.el7
4.4.0-202006080017.git.1.855ef1d.el8
3.11.219-1.git.1.717d59f.el7
4.3.1-202002031701.git.1.cfa4a05.el8
4.3.9-202003230116.git.0.9f1e22e.el8
4.2.20-202002140432.git.1.d9a72a5.el7
4.3.3-202002170501.git.1.3b8b4cc.el8
3.11.170-1.git.1.7265da1.el7
4.3.5-202003020117.git.0.237579a.el8
Vulnerabilities (198)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-9675 |
CWE-22 | Low | 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 21.10.2024 |
SB2024102103 SB2024102104 SB2024102107 and 51 more |
||
| #VU98817 - UNIX Symbolic Link (Symlink) Following CVE-2024-9676 |
CWE-61 | Low | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 18.10.2024 |
SB2024101822 SB2024101823 SB2024101824 and 54 more |
||
| #VU98141 - Improper input validation CVE-2024-9341 |
CWE-20 | Low | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8 | 08.10.2024 |
SB2024100842 SB2024100843 SB2024100848 and 44 more |
||
| #VU97965 - Improper Access Control CVE-2024-44082 |
CWE-284 | Low | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8 | 02.10.2024 |
SB2024100260 SB2024100261 SB2024100262 and 10 more |
||
| #VU97217 - Resource exhaustion CVE-2024-34158 |
CWE-400 | Medium | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 76 more |
||
| #VU97216 - Resource exhaustion CVE-2024-34156 |
CWE-400 | Medium | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 143 more |
||
| #VU97215 - Resource exhaustion CVE-2024-34155 |
CWE-400 | Medium | 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 81 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202404151710.p0.g36754b7.assembly.stream.el8, 4.14.0-202404151639.p0.g8926a29.assembly.stream.el8 | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU73227 - Use of Insufficiently Random Values CVE-2019-11840 |
CWE-330 | Medium | 3.11.374-1.git.1478.ef11824.el7 | 10.03.2023 |
SB2019050924 SB2023031017 SB2023031018 and 2 more |
||
| #VU60104 - Improper input validation CVE-2020-8554 |
CWE-20 | Medium | 3.11.374-1.git.1478.ef11824.el7 | 27.01.2022 |
SB2022012749 SB2022012750 SB2022042257 and 2 more |
||
| #VU56245 - Improper input validation CVE-2021-25735 |
CWE-20 | Medium | 4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 01.09.2021 |
SB2021090125 SB2021090126 SB2022083132 and 4 more |
||
| #VU53436 - Exposure of sensitive information to an unauthorized actor CVE-2021-25737 |
CWE-200 | Low | 4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 24.05.2021 |
SB2021052409 SB2021060911 SB2021090126 and 4 more |
||
| #VU53152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-21648 |
CWE-79 | Low | 4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 12.05.2021 |
SB2021051209 SB2021090126 SB2022083132 and 1 more |
||
| #VU51878 - Exposure of sensitive information to an unauthorized actor CVE-2021-28163 |
CWE-200 | Medium | 4.7.0-202105111743.p0.git.36c2cdd.el8 | 01.04.2021 |
SB2021040179 SB2021050704 SB2021051321 and 27 more |
||
| #VU51876 - Resource exhaustion CVE-2021-28165 |
CWE-400 | Medium | 4.7.0-202105111743.p0.git.36c2cdd.el8 | 01.04.2021 |
SB2021040179 SB2021042208 SB2021050704 and 56 more |
||
| #VU50957 - Integer overflow CVE-2020-27813 |
CWE-190 | Medium | 3.11.404-1.git.1494.91fb403.el7 | 25.02.2021 |
SB2020120224 SB2021052527 SB2023070702 and 3 more |
||
| #VU48480 - Improper input validation CVE-2020-28362 |
CWE-20 | Medium | 4.7.0-202104250659.p0.git.d49acc4.el8, 4.7.0-202105111743.p0.git.36c2cdd.el8 | 17.11.2020 |
SB2020111715 SB2020111716 SB2020111225 and 30 more |
||
| #VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2020-26137 |
CWE-93 | Medium | 3.11.374-1.git.1478.ef11824.el7 | 30.09.2020 |
SB2020100716 SB2020121420 SB2021052028 and 35 more |
||
| #VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-16845 |
CWE-835 | Medium | 4.5.0-202010091010.p0.git.1998.b73d461.el8, 4.5.0-202012022006.p0.git.2002.19b85d0.el8, 4.6.0-202103192141.p0.git.2234.cba9525.el8, 4.7.0-202104250659.p0.git.d49acc4.el8 | 14.08.2020 |
SB2020081403 SB2020081404 SB2020081405 and 44 more |
||
| #VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-15586 |
CWE-362 | Medium | 4.5.0-202010091010.p0.git.1998.b73d461.el8, 4.5.0-202012022006.p0.git.2002.19b85d0.el8, 4.6.0-202103192141.p0.git.2234.cba9525.el8, 4.7.0-202104250659.p0.git.d49acc4.el8 | 27.07.2020 |
SB2020072734 SB2020072735 SB2020072749 and 37 more |
Showing elements 61 - 80 out of 198